mirror of https://github.com/acidanthera/audk.git
e3fa6986ae
Ensure that when a #VC exception happens, the instruction at the
instruction pointer matches the instruction that is expected given the
error code. This is to mitigate the ahoi WeSee attack [1] that could
allow hypervisors to breach integrity and confidentiality of the
firmware by maliciously injecting interrupts. This change is a
translated version of a linux patch e3ef461af35a ("x86/sev: Harden #VC
instruction emulation somewhat")
[1] https://ahoi-attacks.github.io/wesee/
Cc: Borislav Petkov (AMD) <bp@alien8.de>
Cc: Tom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: Adam Dunlap <acdunlap@google.com>
Reviewed-by: Tom Lendacky <thomas.lendacky@amd.com>
Reviewed-by: Gerd Hoffmann <kraxel@redhat.com>
|
||
|---|---|---|
| .. | ||
| X64 | ||
| CcExitLib.c | ||
| CcExitLib.inf | ||
| CcExitTd.h | ||
| CcExitVcHandler.c | ||
| CcExitVcHandler.h | ||
| CcExitVeHandler.c | ||
| CcInstruction.c | ||
| CcInstruction.h | ||
| PeiDxeCcExitVcHandler.c | ||
| SecCcExitLib.inf | ||
| SecCcExitVcHandler.c | ||