mirror of
https://github.com/acidanthera/audk.git
synced 2025-07-31 01:24:12 +02:00
202fb22be6
BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 The VMM launch sequence should have pre-validated all the data pages used in the Reset vector. The range does not cover the data pages used during the SEC phase (mainly PEI and DXE firmware volume decompression memory). When SEV-SNP is active, the memory must be pre-validated before the access. Add support to pre-validate the memory range from SnpSecPreValidatedStart to SnpSecPreValidatedEnd. This should be sufficent to enter into the PEI phase. Cc: Michael Roth <michael.roth@amd.com> Cc: James Bottomley <jejb@linux.ibm.com> Cc: Min Xu <min.m.xu@intel.com> Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Tom Lendacky <thomas.lendacky@amd.com> Cc: Jordan Justen <jordan.l.justen@intel.com> Cc: Ard Biesheuvel <ardb+tianocore@kernel.org> Cc: Erdem Aktas <erdemaktas@google.com> Cc: Gerd Hoffmann <kraxel@redhat.com> Acked-by: Jiewen Yao <Jiewen.yao@intel.com> Acked-by: Gerd Hoffmann <kraxel@redhat.com> Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
71 lines
3.7 KiB
PHP
71 lines
3.7 KiB
PHP
## @file
|
|
# This FDF include file computes the end of the scratch buffer used in
|
|
# DecompressMemFvs() [OvmfPkg/Sec/SecMain.c]. It is based on the decompressed
|
|
# (ie. original) size of the LZMA-compressed section of the one FFS file in
|
|
# the FVMAIN_COMPACT firmware volume.
|
|
#
|
|
# Copyright (C) 2015, Red Hat, Inc.
|
|
#
|
|
# SPDX-License-Identifier: BSD-2-Clause-Patent
|
|
##
|
|
|
|
# The GUID EE4E5898-3914-4259-9D6E-DC7BD79403CF means "LzmaCustomDecompress".
|
|
# The decompressed output will have the following structure (see the file
|
|
# "9E21FD93-9C72-4c15-8C4B-E77F1DB2D792SEC1.guided.dummy" in the
|
|
# Build/Ovmf*/*/FV/Ffs/9E21FD93-9C72-4c15-8C4B-E77F1DB2D792/ directory):
|
|
#
|
|
# Size Contents
|
|
# ------------------- --------------------------------------------------------
|
|
# 4 EFI_COMMON_SECTION_HEADER, stating size 124 (0x7C) and
|
|
# type 0x19 (EFI_SECTION_RAW). The purpose of this section
|
|
# is to pad the start of PEIFV to 128 bytes.
|
|
# 120 Zero bytes (padding).
|
|
#
|
|
# 4 EFI_COMMON_SECTION_HEADER, stating size
|
|
# (PcdOvmfPeiMemFvSize + 4), and type 0x17
|
|
# (EFI_SECTION_FIRMWARE_VOLUME_IMAGE).
|
|
# PcdOvmfPeiMemFvSize PEIFV. Note that the above sizes pad the offset of this
|
|
# object to 128 bytes. See also the "guided.dummy.txt"
|
|
# file in the same directory.
|
|
#
|
|
# 4 EFI_COMMON_SECTION_HEADER, stating size 12 (0xC) and
|
|
# type 0x19 (EFI_SECTION_RAW). The purpose of this section
|
|
# is to pad the start of DXEFV to 16 bytes.
|
|
# 8 Zero bytes (padding).
|
|
#
|
|
# 4 EFI_COMMON_SECTION_HEADER, stating size
|
|
# (PcdOvmfDxeMemFvSize + 4), and type 0x17
|
|
# (EFI_SECTION_FIRMWARE_VOLUME_IMAGE).
|
|
# PcdOvmfDxeMemFvSize DXEFV. Note that the above sizes pad the offset of this
|
|
# object to 16 bytes. See also the "guided.dummy.txt" file
|
|
# in the same directory.
|
|
#
|
|
# The total size after decompression is (128 + PcdOvmfPeiMemFvSize + 16 +
|
|
# PcdOvmfDxeMemFvSize).
|
|
|
|
DEFINE OUTPUT_SIZE = (128 + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfPeiMemFvSize + 16 + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvSize)
|
|
|
|
# LzmaCustomDecompressLib uses a constant scratch buffer size of 64KB; see
|
|
# SCRATCH_BUFFER_REQUEST_SIZE in
|
|
# "MdeModulePkg/Library/LzmaCustomDecompressLib/LzmaDecompress.c".
|
|
|
|
DEFINE DECOMP_SCRATCH_SIZE = 0x00010000
|
|
|
|
# Note: when we use PcdOvmfDxeMemFvBase in this context, BaseTools have not yet
|
|
# offset it with MEMFD's base address. For that reason we have to do it manually.
|
|
#
|
|
# The calculation below mirrors DecompressMemFvs() [OvmfPkg/Sec/SecMain.c].
|
|
|
|
DEFINE OUTPUT_BASE = ($(MEMFD_BASE_ADDRESS) + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvBase + 0x00100000)
|
|
DEFINE DECOMP_SCRATCH_BASE_UNALIGNED = ($(OUTPUT_BASE) + $(OUTPUT_SIZE))
|
|
DEFINE DECOMP_SCRATCH_BASE_ALIGNMENT = 0x000FFFFF
|
|
DEFINE DECOMP_SCRATCH_BASE_MASK = 0xFFF00000
|
|
DEFINE DECOMP_SCRATCH_BASE = (($(DECOMP_SCRATCH_BASE_UNALIGNED) + $(DECOMP_SCRATCH_BASE_ALIGNMENT)) & $(DECOMP_SCRATCH_BASE_MASK))
|
|
|
|
SET gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDecompressionScratchEnd = $(DECOMP_SCRATCH_BASE) + $(DECOMP_SCRATCH_SIZE)
|
|
|
|
#
|
|
# The range of pages that should be pre-validated during the SEC phase when SEV-SNP is active in the guest VM.
|
|
SET gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecValidatedStart = $(MEMFD_BASE_ADDRESS) + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfPeiMemFvBase
|
|
SET gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecValidatedEnd = $(DECOMP_SCRATCH_BASE) + $(DECOMP_SCRATCH_SIZE)
|