From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andrew Cooper Subject: [PATCH v6.5 00/26] x86: Mitigations for SP2/CVE-2017-5715/Branch Target Injection Date: Thu, 4 Jan 2018 00:15:29 +0000 Message-ID: <1515024955-13390-1-git-send-email-andrew.cooper3@citrix.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Sender: "Xen-devel" To: Xen-devel Cc: Andrew Cooper List-Id: xen-devel@lists.xenproject.org RHVlIHRvIHRoZSBmb3Jlc2hvcnRlbmluZyBvZiB0aGUgZW1iYXJnbywgSSd2ZSBwb3N0ZWQgd2hh dCBpcyBjdXJyZW50bHkKYXZhaWxhYmxlLiAgSSBoYXZlIHlldCB0byBjb21wbGV0ZSBhbGwgdGhl IGZlZWRiYWNrIGZyb20gdjYgcmV2aWV3LCBidXQgd2hhdAppcyBoZXJlIHNob3VsZCBiZSBmdW5j dGlvbmFsbHkgY29ycmVjdCwgaWYgYSBsaXR0bGUgcm91Z2ggYXJvdW5kIHRoZSBlZGdlcy4KCipJ bXBvcnRhbnQ6KgoKSW4gYWRkaXRpb24gdG8gdGhpcyBzb2Z0d2FyZSBzZXJpZXMsIHlvdSB3aWxs IG5lZWQgdGhlIGZvbGxvd2luZzoKCiAgMSkgQSBjb21waWxlciB3aGljaCB1bmRlcnN0YW5kcyAt bWluZGlyZWN0LWJyYW5jaD10aHVuay1leHRlcm5hbCBhbmQKICAgICAtbWluZGlyZWN0LWJyYW5j aC1yZWdpc3Rlci4gIEEgR0NDIHBhdGNoIHNlcmllcyBpbXBsZW1lbnRpbmcgdGhpcwogICAgIHNo b3VsZCBiZSBhdmFpbGFibGUgaW1taW5lbnRseS4KCiAgMikgTmV3IG1pY3JvY29kZSBmcm9tIElu dGVsIGFuZCBBTUQuICBUaGVzZSBwcm92aWRlIG5ldyBNU1JzIGZvciBYZW4gdG8gdXNlLAogICAg IGFuZCB2aXJ0dWFsaXNlIGZvciBndWVzdCBrZXJuZWxzIHRvIHVzZS4KClRoZXJlIGFyZSBzb21l IGxpbWl0YXRpb25zLCBldmVuIHdpdGggdGhlIHdvcmsgcHJlc2VudGVkIGhlcmUuCgogIDEpIHZD UFUtdG8tdkNQVSBTUDIgYXR0YWNrcyBjYW4gb25seSBiZSBtaXRpZ2F0ZWQgYXQgdGhlIGh5cGVy dmlzb3IgbGV2ZWwKICAgICB3aXRoIElCUEIgc3VwcG9ydCwgd2hpY2ggZm9yIGludGVybmFsIHBp cGVsaW5lIHJlYXNvbnMsIHdlIGRvIG5vdCBleHBlY3QKICAgICB0byBiZSBtYWRlIGF2YWlsYWJs ZSBvbiBvbGRlciBwcm9jZXNzb3JzLiAgRm9yIG5vdywgSSB3aWxsIGxlYXZlIHRoZXNlCiAgICAg ZGV0YWlscyB0byB0aGUgaGFyZHdhcmUgdmVuZG9ycy4KCiAgMikgSGFyZHdhcmUgbGFja2luZyBT TUVQIGlzIGluIGEgd29yc2UgcG9zaXRpb24gdGhhbiBoYXJkd2FyZSB3aXRoIFNNRVAuICBJZgog ICAgIHlvdSBoYXZlIFNNRVAgKEludGVsIEl2eUJyaWRnZSBhbmQgbGF0ZXIsIFNvbWUgQU1EIEZh bTE2aCBhbmQgYWxsIEZhbTE3aAogICAgIGFuZCBsYXRlciksIG1ha2UgYWJzb2x1dGVseSBzdXJl IGl0IGlzIGVuYWJsZWQgaW4gdGhlIEJJT1MgYW5kIHdvcmtpbmcuCgogIDMpIE9uIGhhcmR3YXJl IGxhY2tpbmcgU01FUCBzdXBwb3J0LCBpdCBpcyBzdGlsbCBhbiBvcGVuIHF1ZXN0aW9uIGhvdyB0 bwogICAgIHByb3RlY3QgYWdhaW5zdCBSU0ItdG8tU01NIHNwZWN1bGF0aW9uLiAgTmF0aXZlIG9w ZXJhdGluZyBzeXN0ZW1zIGNhbiBmaXgKICAgICB0aGlzIGJ5IHByb2hpYml0aW5nIHVzZXJzcGFj ZSBmcm9tIG1tYXAoKSdpbmcgYWRkcmVzc2VzIHdoaWNoIGFsaWFzIHRoZQogICAgIFNNTSByYW5n ZSwgYnV0IFhlbiBoYXMgbm8gZmVhc2libGUgd2F5IG9mIGVuZm9yY2luZyB0aGlzIHJlc3RyaWN0 aW9uIG9uCiAgICAgUFYgZ3Vlc3RzLCBldmVuIGlmIHdlIGNvdWxkIHRvbGVyYXRlIHRoZSBBQkkg YnJlYWthZ2UuICAoSG93ZXZlciwgc2VlIHRoZQogICAgIGZvcnRoY29taW5nIFNQMyBtaXRpZ2F0 aW9uIHNlcmllcyBmb3IgYWx0ZXJuYXRpdmVzIGZvciB1biB0cnVzdGVkIFBWCiAgICAgZ3Vlc3Rz KS4KCgpQbGVhc2Ugc2VlIHRoZSBjb21taXQgbWVzc2FnZXMgYW5kIGNvbW1lbnRzIGZvciBtb3Jl IGRldGFpbHMgYWJvdXQgbWl0aWdhdGlvbgpkZXRhaWxzIGFuZCBhdmFpbGFibGUgb3B0aW9ucy9p bXBhY3RzLiAgSXRzIG1vcmUgY29tcGxpY2F0ZWQgdGhhbiBJIGNhcmUgdG8KcmVwcm9kdWNlIGhl cmUgKGFuZCByaXNrIGludHJvZHVjaW5nIGEgY29udHJhZGl0aW9uKS4KCn5BbmRyZXcKCkFuZHJl dyBDb29wZXIgKDI2KToKICB4ODYvYWx0OiBCcmVhayBvdXQgYWx0ZXJuYXRpdmUtYXNtIGludG8g YSBzZXBhcmF0ZSBoZWFkZXIgZmlsZQogIHg4Ni9hbHQ6IEludHJvZHVjZSBBTFRFUk5BVElWRXss XzJ9IG1hY3JvcwogIHg4Ni9odm06IFJlbmFtZSB1cGRhdGVfZ3Vlc3RfdmVuZG9yKCkgY2FsbGJh Y2sgdG8gY3B1aWRfcG9saWN5X2NoYW5nZWQoKQogIHg4NjogSW50cm9kdWNlIGEgY29tbW9uIGNw dWlkX3BvbGljeV91cGRhdGVkKCkKICB4ODYvZW50cnk6IFJlbW92ZSBzdXBwb3J0IGZvciBwYXJ0 aWFsIGNwdV91c2VyX3JlZ3MgZnJhbWVzCiAgeDg2L2VudHJ5OiBSZWFycmFuZ2UgUkVTVE9SRV9B TEwgdG8gcmVzdG9yZSByZWdpc3RlciBpbiBzdGFjayBvcmRlcgogIHg4Ni9odm06IFVzZSBTQVZF X0FMTCB0byBjb25zdHJ1Y3QgdGhlIGNwdV91c2VyX3JlZ3MgZnJhbWUgYWZ0ZXIgVk1FeGl0CiAg eDg2L2VudHJ5OiBFcmFzZSBndWVzdCBHUFIgc3RhdGUgb24gZW50cnkgdG8gWGVuCiAgeDg2OiBT dXBwb3J0IGNvbXBpbGluZyB3aXRoIGluZGlyZWN0IGJyYW5jaCB0aHVua3MKICBjb21tb24vd2Fp dDogQ2xhcmlmaWNhdGlvbnMgdG8gd2FpdCBpbmZyYXN0cnVjdHVyZQogIHg4NjogU3VwcG9ydCBp bmRpcmVjdCB0aHVua3MgZnJvbSBhc3NlbWJseSBjb2RlCiAgeDg2L2Jvb3Q6IFJlcG9ydCBkZXRh aWxzIG9mIHNwZWN1bGF0aXZlIG1pdGlnYXRpb25zCiAgeDg2L2FtZDogVHJ5IHRvIHNldCBsZmVu Y2UgYXMgYmVpbmcgRGlzcGF0Y2ggU2VyaWFsaXNpbmcKICB4ODY6IEludHJvZHVjZSBhbHRlcm5h dGl2ZSBpbmRpcmVjdCB0aHVua3MKICB4ODYvZmVhdHVyZTogRGVmaW5pdGlvbnMgZm9yIEluZGly ZWN0IEJyYW5jaCBDb250cm9scwogIHg4Ni9jbWRsaW5lOiBJbnRyb2R1Y2UgYSBjb21tYW5kIGxp bmUgb3B0aW9uIHRvIGRpc2FibGUgSUJSUy9JQlBCLCBTVElCUCBhbmQgSUJQQgogIHg4Ni9tc3I6 IEVtdWxhdGlvbiBvZiBNU1Jfe1NQRUNfQ1RSTCxQUkVEX0NNRH0gZm9yIGd1ZXN0cwogIHg4Ni9t aWdyYXRlOiBNb3ZlIE1TUl9TUEVDX0NUUkwgb24gbWlncmF0ZQogIHg4Ni9odm06IFBlcm1pdCBn dWVzdHMgZGlyZWN0IGFjY2VzcyB0byBNU1Jfe1NQRUNfQ1RSTCxQUkVEX0NNRH0KICB4ODY6IFBy b3RlY3QgdW5hd2FyZSBkb21haW5zIGZyb20gbWVkZGxpbmcgaHlwZXJ0aHJlYWRzCiAgeDg2L2Vu dHJ5OiBVc2UgTVNSX1NQRUNfQ1RSTCBhdCBlYWNoIGVudHJ5L2V4aXQgcG9pbnQKICB4ODYvYm9v dDogQ2FsY3VsYXRlIHRoZSBtb3N0IGFwcHJvcHJpYXRlIEJUSSBtaXRpZ2F0aW9uIHRvIHVzZQog IHg4Ni9lbnRyeTogQ2xvYmJlciB0aGUgUmV0dXJuIFN0YWNrIEJ1ZmZlciBvbiBlbnRyeSB0byBY ZW4KICB4ODYvY3R4dDogSXNzdWUgYSBzcGVjdWxhdGlvbiBiYXJyaWVyIGJldHdlZW4gdmNwdSBj b250ZXh0cwogIHg4Ni9jcHVpZDogT2ZmZXIgSW5kaXJlY3QgQnJhbmNoIENvbnRyb2xzIHRvIGd1 ZXN0cwogIHg4Ni9pZGxlOiBDbGVhciBTUEVDX0NUUkwgd2hpbGUgaWRsZQoKIGRvY3MvbWlzYy94 ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duICAgICAgICAgfCAgMzcgKysrKwogdG9vbHMvbGlieGMv eGNfY3B1aWRfeDg2LmMgICAgICAgICAgICAgICAgICB8ICAgNCArLQogdG9vbHMvbGlieGwvbGli eGxfY3B1aWQuYyAgICAgICAgICAgICAgICAgICB8ICAgMyArCiB0b29scy9taXNjL3hlbi1jcHVp ZC5jICAgICAgICAgICAgICAgICAgICAgIHwgIDEyICstCiB0b29scy90ZXN0cy94ODZfZW11bGF0 b3IveDg2LWVtdWxhdGUuYyAgICAgIHwgICAxIC0KIHhlbi9hcmNoL3g4Ni9NYWtlZmlsZSAgICAg ICAgICAgICAgICAgICAgICAgfCAgIDIgKwogeGVuL2FyY2gveDg2L1J1bGVzLm1rICAgICAgICAg ICAgICAgICAgICAgICB8ICAgNyArCiB4ZW4vYXJjaC94ODYvYWNwaS9jcHVfaWRsZS5jICAgICAg ICAgICAgICAgIHwgIDIxICsrCiB4ZW4vYXJjaC94ODYvYm9vdC90cmFtcG9saW5lLlMgICAgICAg ICAgICAgIHwgIDI0ICstCiB4ZW4vYXJjaC94ODYvY3B1L2FtZC5jICAgICAgICAgICAgICAgICAg ICAgIHwgIDM1ICsrLQogeGVuL2FyY2gveDg2L2NwdS9td2FpdC1pZGxlLmMgICAgICAgICAgICAg ICB8ICAgNyArCiB4ZW4vYXJjaC94ODYvY3B1aWQuYyAgICAgICAgICAgICAgICAgICAgICAgIHwg IDQzICsrKysKIHhlbi9hcmNoL3g4Ni9kb21haW4uYyAgICAgICAgICAgICAgICAgICAgICAgfCAg NDIgKysrKwogeGVuL2FyY2gveDg2L2RvbWN0bC5jICAgICAgICAgICAgICAgICAgICAgICB8ICAz OCArKystCiB4ZW4vYXJjaC94ODYvZXh0YWJsZS5jICAgICAgICAgICAgICAgICAgICAgIHwgICA0 ICstCiB4ZW4vYXJjaC94ODYvaHZtL2h2bS5jICAgICAgICAgICAgICAgICAgICAgIHwgICA0ICst CiB4ZW4vYXJjaC94ODYvaHZtL3N2bS9lbnRyeS5TICAgICAgICAgICAgICAgIHwgIDI4ICstLQog eGVuL2FyY2gveDg2L2h2bS9zdm0vc3ZtLmMgICAgICAgICAgICAgICAgICB8ICAgOSArLQogeGVu L2FyY2gveDg2L2h2bS92bXgvZW50cnkuUyAgICAgICAgICAgICAgICB8ICAyOCArKy0KIHhlbi9h cmNoL3g4Ni9odm0vdm14L3ZteC5jICAgICAgICAgICAgICAgICAgfCAgMjMgKy0KIHhlbi9hcmNo L3g4Ni9pbmRpcmVjdF90aHVuay5TICAgICAgICAgICAgICAgfCAgMzkgKysrKwogeGVuL2FyY2gv eDg2L21zci5jICAgICAgICAgICAgICAgICAgICAgICAgICB8ICA0OSArKysrKwogeGVuL2FyY2gv eDg2L3B2L2RvbWFpbi5jICAgICAgICAgICAgICAgICAgICB8ICAgMSAtCiB4ZW4vYXJjaC94ODYv cHYvZW11bC1wcml2LW9wLmMgICAgICAgICAgICAgIHwgIDQzICsrKy0KIHhlbi9hcmNoL3g4Ni9z ZXR1cC5jICAgICAgICAgICAgICAgICAgICAgICAgfCAgIDQgKwogeGVuL2FyY2gveDg2L3NtcGJv b3QuYyAgICAgICAgICAgICAgICAgICAgICB8ICAgMiArCiB4ZW4vYXJjaC94ODYvc3BlY19jdHJs LmMgICAgICAgICAgICAgICAgICAgIHwgMzI4ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysK IHhlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYyAgICAgICAgICAgfCAgIDYgKwogeGVu L2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUyAgICAgICAgICB8ICAxOSArLQogeGVuL2Fy Y2gveDg2L3g4Nl82NC9lbnRyeS5TICAgICAgICAgICAgICAgICB8ICA1MSArKysrLQogeGVuL2Fy Y2gveDg2L3g4Nl82NC90cmFwcy5jICAgICAgICAgICAgICAgICB8ICAxMyArLQogeGVuL2FyY2gv eDg2L3g4Nl9lbXVsYXRlLmMgICAgICAgICAgICAgICAgICB8ICAgMSAtCiB4ZW4vYXJjaC94ODYv eDg2X2VtdWxhdGUveDg2X2VtdWxhdGUuYyAgICAgIHwgIDEyICstCiB4ZW4vYXJjaC94ODYveGVu Lmxkcy5TICAgICAgICAgICAgICAgICAgICAgIHwgICAxICsKIHhlbi9jb21tb24va2VybmVsLmMg ICAgICAgICAgICAgICAgICAgICAgICAgfCAgMjMgKysKIHhlbi9jb21tb24vd2FpdC5jICAgICAg ICAgICAgICAgICAgICAgICAgICAgfCAgMzggKysrLQogeGVuL2luY2x1ZGUvYXNtLXg4Ni9hbHRl cm5hdGl2ZS1hc20uaCAgICAgICB8ICA3NyArKysrKysrCiB4ZW4vaW5jbHVkZS9hc20teDg2L2Fs dGVybmF0aXZlLmggICAgICAgICAgIHwgIDEzICstCiB4ZW4vaW5jbHVkZS9hc20teDg2L2FzbV9k ZWZucy5oICAgICAgICAgICAgIHwgMTU4ICsrKystLS0tLS0tLS0tCiB4ZW4vaW5jbHVkZS9hc20t eDg2L2NwdWZlYXR1cmUuaCAgICAgICAgICAgIHwgICA2ICsKIHhlbi9pbmNsdWRlL2FzbS14ODYv Y3B1ZmVhdHVyZXMuaCAgICAgICAgICAgfCAgMTAgKwogeGVuL2luY2x1ZGUvYXNtLXg4Ni9jdXJy ZW50LmggICAgICAgICAgICAgICB8ICAgNiArCiB4ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFpbi5o ICAgICAgICAgICAgICAgIHwgICAyICsKIHhlbi9pbmNsdWRlL2FzbS14ODYvaHZtL2h2bS5oICAg ICAgICAgICAgICAgfCAgIDYgKy0KIHhlbi9pbmNsdWRlL2FzbS14ODYvaW5kaXJlY3RfdGh1bmtf YXNtLmggICAgfCAgNDEgKysrKwogeGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3ItaW5kZXguaCAgICAg ICAgICAgICB8ICAxMiArCiB4ZW4vaW5jbHVkZS9hc20teDg2L21zci5oICAgICAgICAgICAgICAg ICAgIHwgIDE1ICsrCiB4ZW4vaW5jbHVkZS9hc20teDg2L25vcHMuaCAgICAgICAgICAgICAgICAg IHwgIDEwICstCiB4ZW4vaW5jbHVkZS9hc20teDg2L3NwZWNfY3RybC5oICAgICAgICAgICAgIHwg IDc4ICsrKysrKysKIHhlbi9pbmNsdWRlL2FzbS14ODYvc3BlY19jdHJsX2FzbS5oICAgICAgICAg fCAyNzYgKysrKysrKysrKysrKysrKysrKysrKysKIHhlbi9pbmNsdWRlL3B1YmxpYy9hcmNoLXg4 Ni9jcHVmZWF0dXJlc2V0LmggfCAgIDMgKwogeGVuL2luY2x1ZGUveGVuL2xpYi5oICAgICAgICAg ICAgICAgICAgICAgICB8ICAgNyArCiB4ZW4vdG9vbHMvZ2VuLWNwdWlkLnB5ICAgICAgICAgICAg ICAgICAgICAgIHwgICA1ICsKIDUzIGZpbGVzIGNoYW5nZWQsIDE0OTcgaW5zZXJ0aW9ucygrKSwg MjMwIGRlbGV0aW9ucygtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IHhlbi9hcmNoL3g4Ni9pbmRpcmVj dF90aHVuay5TCiBjcmVhdGUgbW9kZSAxMDA2NDQgeGVuL2FyY2gveDg2L3NwZWNfY3RybC5jCiBj cmVhdGUgbW9kZSAxMDA2NDQgeGVuL2luY2x1ZGUvYXNtLXg4Ni9hbHRlcm5hdGl2ZS1hc20uaAog Y3JlYXRlIG1vZGUgMTAwNjQ0IHhlbi9pbmNsdWRlL2FzbS14ODYvaW5kaXJlY3RfdGh1bmtfYXNt LmgKIGNyZWF0ZSBtb2RlIDEwMDY0NCB4ZW4vaW5jbHVkZS9hc20teDg2L3NwZWNfY3RybC5oCiBj cmVhdGUgbW9kZSAxMDA2NDQgeGVuL2luY2x1ZGUvYXNtLXg4Ni9zcGVjX2N0cmxfYXNtLmgKCi0t IAoyLjEuNAoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Clhlbi1kZXZlbCBtYWlsaW5nIGxpc3QKWGVuLWRldmVsQGxpc3RzLnhlbnByb2plY3Qub3JnCmh0 dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5mby94ZW4tZGV2ZWw=