tree 0fdf0b0895233be6a9c3201168052f4f78bf09ec
parent da4d0226c9da9b582e381b649533bc4b4fe0f4cf
author Arthur Heymans <arthur@aheymans.xyz> 1574872477 +0100
committer Chromeos LUCI <chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com> 1649813213 +0000

UPSTREAM: cpu/x86/smm: Add sinkhole mitigation to relocatable smmstub

The sinkhole exploit exists in placing the lapic base such that it
messes with GDT. This can be mitigated by checking the lapic MSR
against the current program counter.

Signed-off-by: Arthur Heymans <arthur@aheymans.xyz>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/37289
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Original-Change-Id: I49927c4f4218552b732bac8aae551d845ad7f079
GitOrigin-RevId: 95af254e116802490481c6293ae752f5b61e561b
Change-Id: Ia6f8fb8beac116b9ee9ba7dd0df30cbf5a598c03
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/third_party/coreboot/+/3581091
Tested-by: CopyBot Service Account <copybot.service@gmail.com>
Reviewed-by: Jack Rosenthal <jrosenth@chromium.org>
Commit-Queue: Jack Rosenthal <jrosenth@chromium.org>