|
 |
5d360b |
From 151cbf5d444ab746d05dc0757ec972df8880d0ec Mon Sep 17 00:00:00 2001
|
|
|
5d360b |
From: Paolo Bonzini <pbonzini@redhat.com>
|
|
|
5d360b |
Date: Wed, 13 Dec 2017 15:43:39 -0200
|
|
|
5d360b |
Subject: [PATCH 1/3] target-i386: cpu: add new CPUID bits for indirect branch
|
|
|
5d360b |
predictor restrictions
|
|
|
5d360b |
|
|
|
5d360b |
RH-Author: Eduardo Habkost <ehabkost@redhat.com>
|
|
|
5d360b |
Message-id: <20171213174341.20684-2-ehabkost@redhat.com>
|
|
|
5d360b |
Patchwork-id: n/a
|
|
|
5d360b |
O-Subject: [CONFIDENTIAL][RHEL-7.5 qemu-kvm PATCH v2 1/3] target-i386: cpu:
|
|
|
5d360b |
add new CPUID bits for indirect branch predictor restrictions
|
|
|
5d360b |
Bugzilla: CVE-2017-5715
|
|
|
5d360b |
RH-Acked-by: Paolo Bonzini <pbonzini@redhat.com>
|
|
|
5d360b |
RH-Acked-by: Miroslav Rezanina <mrezanin@redhat.com>
|
|
|
5d360b |
---
|
|
|
5d360b |
target-i386/cpu.c | 19 ++++++++++++++++++-
|
|
|
5d360b |
target-i386/cpu.h | 1 +
|
|
|
5d360b |
2 files changed, 19 insertions(+), 1 deletion(-)
|
|
|
5d360b |
|
|
|
5d360b |
diff --git a/target-i386/cpu.c b/target-i386/cpu.c
|
|
|
5d360b |
index 539d659..335689b 100644
|
|
|
5d360b |
--- a/target-i386/cpu.c
|
|
|
5d360b |
+++ b/target-i386/cpu.c
|
|
|
5d360b |
@@ -172,6 +172,17 @@ static const char *cpuid_7_0_edx_feature_name[] = {
|
|
|
5d360b |
NULL, NULL, NULL, NULL,
|
|
|
5d360b |
NULL, NULL, NULL, NULL,
|
|
|
5d360b |
NULL, NULL, NULL, NULL,
|
|
|
5d360b |
+ NULL, NULL, "spec-ctrl", "stibp",
|
|
|
5d360b |
+ NULL, "arch-facilities", NULL, NULL,
|
|
|
5d360b |
+};
|
|
|
5d360b |
+
|
|
|
5d360b |
+static const char *cpuid_80000008_ebx_feature_name[] = {
|
|
|
5d360b |
+ NULL, NULL, NULL, NULL,
|
|
|
5d360b |
+ NULL, NULL, NULL, NULL,
|
|
|
5d360b |
+ NULL, NULL, NULL, NULL,
|
|
|
5d360b |
+ "ibpb", NULL, NULL, NULL,
|
|
|
5d360b |
+ NULL, NULL, NULL, NULL,
|
|
|
5d360b |
+ NULL, NULL, NULL, NULL,
|
|
|
5d360b |
NULL, NULL, NULL, NULL,
|
|
|
5d360b |
NULL, NULL, NULL, NULL,
|
|
|
5d360b |
};
|
|
|
5d360b |
@@ -314,6 +325,12 @@ static FeatureWordInfo feature_word_info[FEATURE_WORDS] = {
|
|
|
5d360b |
.cpuid_reg = R_EDX,
|
|
|
5d360b |
.tcg_features = TCG_7_0_EDX_FEATURES,
|
|
|
5d360b |
},
|
|
|
5d360b |
+ [FEAT_8000_0008_EBX] = {
|
|
|
5d360b |
+ .feat_names = cpuid_80000008_ebx_feature_name,
|
|
|
5d360b |
+ .cpuid_eax = 0x80000008,
|
|
|
5d360b |
+ .cpuid_needs_ecx = false, .cpuid_ecx = 0,
|
|
|
5d360b |
+ .cpuid_reg = R_EBX,
|
|
|
5d360b |
+ },
|
|
|
5d360b |
[FEAT_XSAVE] = {
|
|
|
5d360b |
.feat_names = cpuid_xsave_feature_name,
|
|
|
5d360b |
.cpuid_eax = 0xd,
|
|
|
5d360b |
@@ -2470,7 +2487,7 @@ void cpu_x86_cpuid(CPUX86State *env, uint32_t index, uint32_t count,
|
|
|
5d360b |
*eax = 0x00000020; /* 32 bits physical */
|
|
|
5d360b |
}
|
|
|
5d360b |
}
|
|
|
5d360b |
- *ebx = 0;
|
|
|
5d360b |
+ *ebx = env->features[FEAT_8000_0008_EBX];
|
|
|
5d360b |
*ecx = 0;
|
|
|
5d360b |
*edx = 0;
|
|
|
5d360b |
if (cs->nr_cores * cs->nr_threads > 1) {
|
|
|
5d360b |
diff --git a/target-i386/cpu.h b/target-i386/cpu.h
|
|
|
5d360b |
index 78b8072..1e5c980 100644
|
|
|
5d360b |
--- a/target-i386/cpu.h
|
|
|
5d360b |
+++ b/target-i386/cpu.h
|
|
|
5d360b |
@@ -406,6 +406,7 @@ typedef enum FeatureWord {
|
|
|
5d360b |
FEAT_7_0_EDX, /* CPUID[EAX=7,ECX=0].EDX */
|
|
|
5d360b |
FEAT_8000_0001_EDX, /* CPUID[8000_0001].EDX */
|
|
|
5d360b |
FEAT_8000_0001_ECX, /* CPUID[8000_0001].ECX */
|
|
|
5d360b |
+ FEAT_8000_0008_EBX, /* CPUID[8000_0008].EBX */
|
|
|
5d360b |
FEAT_C000_0001_EDX, /* CPUID[C000_0001].EDX */
|
|
|
5d360b |
FEAT_KVM, /* CPUID[4000_0001].EAX (KVM_CPUID_FEATURES) */
|
|
|
5d360b |
FEAT_SVM, /* CPUID[8000_000A].EDX */
|
|
|
5d360b |
--
|
|
|
5d360b |
1.8.3.1
|
|
|
5d360b |
|