Commit 4ca191ce authored by Tom Lendacky's avatar Tom Lendacky Committed by Borislav Petkov (AMD)
Browse files

x86/boot/sev: Move SEV decompressor variables into the .data section



As part of the work to remove the dependency on calling into the decompressor
code (startup_64()) for a UEFI boot, a call to rmpadjust() was removed from
sev_enable() in favor of checking the value of the snp_vmpl variable.

When booting through a non-UEFI path and calling startup_64(), the call to
sev_enable() is performed before the BSS section is zeroed. With the removal
of the rmpadjust() call and the corresponding check of the return code, the
snp_vmpl variable is checked.

Since the kernel is running at VMPL0, the snp_vmpl variable will not have been
set and should be the default value of 0.  However, since the call occurs
before the BSS is zeroed, the snp_vmpl variable may not actually be zero,
which will cause the guest boot to fail.

Since the decompressor relocates itself, the BSS would need to be cleared both
before and after the relocation, but this would, in effect, cause all of the
changes to BSS variables before relocation to be lost after relocation.

Instead, move the snp_vmpl variable into the .data section so that it is
initialized and the value made safe during relocation. As a pre-caution
against future changes, move other SEV-related decompressor variables into the
.data section, too.

Fixes: 68a501d7 ("x86/boot: Drop redundant RMPADJUST in SEV SVSM presence check")
Signed-off-by: default avatarTom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: default avatarBorislav Petkov (AMD) <bp@alien8.de>
Reviewed-by: default avatarArd Biesheuvel <ardb@kernel.org>
Reviewed-by: default avatarChangyuan Lyu <changyuanl@google.com>
Tested-by: default avatarKevin Hui <kevinhui@meta.com>
Tested-by: default avatarChangyuan Lyu <changyuanl@google.com>
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/5648b7de5b0a5d0dfef3785f9582b718678c6448.1770217260.git.thomas.lendacky@amd.com
parent 11439c46
Loading
Loading
Loading
Loading
+4 −4
Original line number Diff line number Diff line
@@ -28,17 +28,17 @@
#include "sev.h"

static struct ghcb boot_ghcb_page __aligned(PAGE_SIZE);
struct ghcb *boot_ghcb;
struct ghcb *boot_ghcb __section(".data");

#undef __init
#define __init

#define __BOOT_COMPRESSED

u8 snp_vmpl;
u16 ghcb_version;
u8 snp_vmpl __section(".data");
u16 ghcb_version __section(".data");

u64 boot_svsm_caa_pa;
u64 boot_svsm_caa_pa __section(".data");

/* Include code for early handlers */
#include "../../boot/startup/sev-shared.c"
+1 −1
Original line number Diff line number Diff line
@@ -31,7 +31,7 @@ static u32 cpuid_std_range_max __ro_after_init;
static u32 cpuid_hyp_range_max __ro_after_init;
static u32 cpuid_ext_range_max __ro_after_init;

bool sev_snp_needs_sfw;
bool sev_snp_needs_sfw __section(".data");

void __noreturn
sev_es_terminate(unsigned int set, unsigned int reason)