github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-09-15 05:49:17 +00:00
Code Issues Projects Releases Wiki Activity

hv: enable SMAP in hypervisor

Browse Source 
With SMAP enabled, hypervisor can't access pages that
owned by guest(either SOS or UOS), and an override is
is provided: stac()/clac() to enable/disable access to
guest's memory pages.

 Pre-conditon:
    Mark hypervisor owned pages as supervisor mode (U/S = 0),
       and set all othter memory pages as user mode (U/S = 1).

Tracked-On: #2056
Signed-off-by: Yonghua Huang <yonghua.huang@intel.com>
Acked-by: Anthony Xu <anthony.xu@intel.com>
This commit is contained in:
Yonghua Huang
2018-12-13 16:55:11 +08:00
committed by wenlingz
parent 57dfc7de05
commit 4fc5dcfc3e
22 changed files with 157 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hypervisor/boot/sbl/multiboot.c
View File

@@ -29,8 +29,10 @@ int32_t init_vm_boot_info(struct acrn_vm *vm)
mbi = hpa2hva((uint64_t)boot_regs[1]);
stac();
dev_dbg(ACRN_DBG_BOOT, "Multiboot detected, flag=0x%x", mbi->mi_flags);
if ((mbi->mi_flags & MULTIBOOT_INFO_HAS_MODS) == 0U) {
clac();
ASSERT(false, "no kernel info found");
return -EINVAL;
}
@@ -59,6 +61,7 @@ int32_t init_vm_boot_info(struct acrn_vm *vm)
strnlen_s(vm->vm_desc->bootargs, MEM_2K);
vm->sw.linux_info.bootargs_load_addr = (void *)(vm->vm_desc->mem_size - 8*1024UL);
clac();
return 0;
}
@@ -175,9 +178,11 @@ int32_t init_vm_boot_info(struct acrn_vm *vm)
mbi = (struct multiboot_info *)hpa2hva((uint64_t)boot_regs[1]);
stac();
dev_dbg(ACRN_DBG_BOOT, "Multiboot detected, flag=0x%x", mbi->mi_flags);
if ((mbi->mi_flags & MULTIBOOT_INFO_HAS_MODS) == 0U) {
ASSERT(false, "no sos kernel info found");
clac();
return -EINVAL;
}
@@ -261,6 +266,7 @@ int32_t init_vm_boot_info(struct acrn_vm *vm)
/*parse other modules, like firmware /ramdisk */
parse_other_modules(vm, mods + 1, mbi->mi_mods_count - 1);
}
clac();
return 0;
}
#endif