Attention is currently required from: Felix Singer, Filip Lewiński, Intel coreboot Reviewers, Krystian Hebel, Martin Roth, Michał Kopeć, Michał Żygowski, Paul Menzel.
Jérémy Compostella has posted comments on this change by Michał Żygowski. ( https://review.coreboot.org/c/coreboot/+/83730?usp=email )
Change subject: soc/intel/cannonlake: Let coreboot lock MSR_IA32_DEBUG_INTERFACE
......................................................................
Patch Set 6:
(4 comments)
File src/include/cpu/intel/msr.h:
https://review.coreboot.org/c/coreboot/+/83730/comment/147ef20d_96695831?usp... :
PS6, Line 19: #define MSR_IA32_DEBUG_INTERFACE 0xc80
It seems to be an extra tab
It also seems to be places between `MSR_BOOT_GUARD_SACM_INFO` and its bits definition.
File src/soc/intel/cannonlake/lockdown.c:
https://review.coreboot.org/c/coreboot/+/83730/comment/dc1af6a1_38b8e447?usp... :
PS6, Line 11: #define MSR_IA32_DEBUG_INTERFACE_EN (1 << 0)
: #define MS
Shouldn't it be in src/include/cpu/intel/msr.h ?
Shouldn't it use the BIT macro ?
https://review.coreboot.org/c/coreboot/+/83730/comment/6ff3a860_6f7bb87b?usp... :
PS6, Line 14: static void cpu_lockdown_cfg(void)
Could it be called `lock_debug_interface` instead ?
https://review.coreboot.org/c/coreboot/+/83730/comment/4ffb44e5_efcf5298?usp... :
PS6, Line 18: if (!(msr.lo & MSR_IA32_DEBUG_INTERFACE_LOCK)) {
```
if (msr.lo & MSR_IA32_DEBUG_INTERFACE_LOCK)
return;
if (CONFIG(INTEL_TXT))
msr.lo &= ~MSR_IA32_DEBUG_INTERFACE_EN;
msr.lo |= MSR_IA32_DEBUG_INTERFACE_LOCK;
wrmsr(MSR_IA32_DEBUG_INTERFACE, msr);
```
--
To view, visit
https://review.coreboot.org/c/coreboot/+/83730?usp=email
To unsubscribe, or for help writing mail filters, visit
https://review.coreboot.org/settings?usp=email
Gerrit-MessageType: comment
Gerrit-Project: coreboot
Gerrit-Branch: main
Gerrit-Change-Id: I7ed4382bbe68f03e8eca151245c13928609f434f
Gerrit-Change-Number: 83730
Gerrit-PatchSet: 6
Gerrit-Owner: Michał Żygowski
michal.zygowski@3mdeb.com
Gerrit-Reviewer: Felix Singer
service+coreboot-gerrit@felixsinger.de
Gerrit-Reviewer: Intel coreboot Reviewers
intel_coreboot_reviewers@intel.com
Gerrit-Reviewer: Krystian Hebel
krystian.hebel@3mdeb.com
Gerrit-Reviewer: Martin Roth
martin.roth@amd.corp-partner.google.com
Gerrit-Reviewer: Michał Kopeć
michal.kopec@3mdeb.com
Gerrit-Reviewer: Paul Menzel
paulepanter@mailbox.org
Gerrit-Reviewer: build bot (Jenkins)
no-reply@coreboot.org
Gerrit-Reviewer: coreboot org
coreboot.org@gmail.com
Gerrit-CC: Filip Lewiński
filip.lewinski@3mdeb.com
Gerrit-CC: Jérémy Compostella
jeremy.compostella@intel.com
Gerrit-Attention: Felix Singer
service+coreboot-gerrit@felixsinger.de
Gerrit-Attention: Intel coreboot Reviewers
intel_coreboot_reviewers@intel.com
Gerrit-Attention: Michał Żygowski
michal.zygowski@3mdeb.com
Gerrit-Attention: Filip Lewiński
filip.lewinski@3mdeb.com
Gerrit-Attention: Paul Menzel
paulepanter@mailbox.org
Gerrit-Attention: Michał Kopeć
michal.kopec@3mdeb.com
Gerrit-Attention: Krystian Hebel
krystian.hebel@3mdeb.com
Gerrit-Attention: Martin Roth
martin.roth@amd.corp-partner.google.com
Gerrit-Comment-Date: Fri, 14 Feb 2025 18:55:06 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No