ec82b567a7
Falkor is susceptible to branch predictor aliasing and can theoretically be attacked by malicious code. This patch implements a mitigation for these attacks, preventing any malicious entries from affecting other victim contexts. Signed-off-by: Shanker Donthineni <shankerd@codeaurora.org> [will: fix label name when !CONFIG_KVM and remove references to MIDR_FALKOR] Signed-off-by: Will Deacon <will.deacon@arm.com> Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
88 lines
2.1 KiB
ArmAsm
88 lines
2.1 KiB
ArmAsm
/*
|
|
* Contains CPU specific branch predictor invalidation sequences
|
|
*
|
|
* Copyright (C) 2018 ARM Ltd.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License version 2 as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include <linux/linkage.h>
|
|
|
|
.macro ventry target
|
|
.rept 31
|
|
nop
|
|
.endr
|
|
b \target
|
|
.endm
|
|
|
|
.macro vectors target
|
|
ventry \target + 0x000
|
|
ventry \target + 0x080
|
|
ventry \target + 0x100
|
|
ventry \target + 0x180
|
|
|
|
ventry \target + 0x200
|
|
ventry \target + 0x280
|
|
ventry \target + 0x300
|
|
ventry \target + 0x380
|
|
|
|
ventry \target + 0x400
|
|
ventry \target + 0x480
|
|
ventry \target + 0x500
|
|
ventry \target + 0x580
|
|
|
|
ventry \target + 0x600
|
|
ventry \target + 0x680
|
|
ventry \target + 0x700
|
|
ventry \target + 0x780
|
|
.endm
|
|
|
|
.align 11
|
|
ENTRY(__bp_harden_hyp_vecs_start)
|
|
.rept 4
|
|
vectors __kvm_hyp_vector
|
|
.endr
|
|
ENTRY(__bp_harden_hyp_vecs_end)
|
|
ENTRY(__psci_hyp_bp_inval_start)
|
|
sub sp, sp, #(8 * 18)
|
|
stp x16, x17, [sp, #(16 * 0)]
|
|
stp x14, x15, [sp, #(16 * 1)]
|
|
stp x12, x13, [sp, #(16 * 2)]
|
|
stp x10, x11, [sp, #(16 * 3)]
|
|
stp x8, x9, [sp, #(16 * 4)]
|
|
stp x6, x7, [sp, #(16 * 5)]
|
|
stp x4, x5, [sp, #(16 * 6)]
|
|
stp x2, x3, [sp, #(16 * 7)]
|
|
stp x0, x1, [sp, #(16 * 8)]
|
|
mov x0, #0x84000000
|
|
smc #0
|
|
ldp x16, x17, [sp, #(16 * 0)]
|
|
ldp x14, x15, [sp, #(16 * 1)]
|
|
ldp x12, x13, [sp, #(16 * 2)]
|
|
ldp x10, x11, [sp, #(16 * 3)]
|
|
ldp x8, x9, [sp, #(16 * 4)]
|
|
ldp x6, x7, [sp, #(16 * 5)]
|
|
ldp x4, x5, [sp, #(16 * 6)]
|
|
ldp x2, x3, [sp, #(16 * 7)]
|
|
ldp x0, x1, [sp, #(16 * 8)]
|
|
add sp, sp, #(8 * 18)
|
|
ENTRY(__psci_hyp_bp_inval_end)
|
|
|
|
ENTRY(__qcom_hyp_sanitize_link_stack_start)
|
|
stp x29, x30, [sp, #-16]!
|
|
.rept 16
|
|
bl . + 4
|
|
.endr
|
|
ldp x29, x30, [sp], #16
|
|
ENTRY(__qcom_hyp_sanitize_link_stack_end)
|