Dear Rudolf,
Am Sonntag, den 15.05.2016, 19:49 +0200 schrieb Rudolf Marek:
This MSR is used when SYSENTER instruction is used by OS/application. The ESP MSR usually points to to the kernel stack of current thread, so if two different threads execute on different CPUs it will be different. False positive, and they should fix it.
Thank you very much for clearing that up.
I submitted a bug report [1], and there is a patch up for review disabling the tests [2].
Could you please confirm that disabling the other two MSR tests for CS and EIP is also the right thing to do?
Thanks,
Paul
[1] https://bugs.launchpad.net/bugs/1582005 [2] https://lists.ubuntu.com/archives/fwts-devel/2016-May/007917.html