diff options
| author | Ard Biesheuvel <ard.biesheuvel@linaro.org> | 2017-03-01 16:31:43 +0000 |
|---|---|---|
| committer | Ard Biesheuvel <ard.biesheuvel@linaro.org> | 2017-03-07 10:31:56 +0100 |
| commit | 8aab575c26e94c65b8cb3a44dc944c3c47ee1c07 (patch) | |
| tree | 950379ceab02d269049be37cd2a1aaa4f993659d /ArmVirtPkg/ArmVirt.dsc.inc | |
| parent | 9f1dcbe8c8b337770e121fea1ef3cb26f43851c9 (diff) | |
| download | edk2-8aab575c26e94c65b8cb3a44dc944c3c47ee1c07.tar.gz edk2-8aab575c26e94c65b8cb3a44dc944c3c47ee1c07.tar.bz2 edk2-8aab575c26e94c65b8cb3a44dc944c3c47ee1c07.zip | |
ArmVirtPkg: enable non-executable DXE stack for all platforms
Now that ARM has grown support for managing memory permissions in
ArmMmuLib, we can enable the non-executable DXE stack for all virt
platforms. Note that this includes the AARCH64 Xen platform as well.
Note that this is not [entirely] redundant: the non-executable stack
is configured before DxeCore is invoked. The image and memory protection
features configured during DXE only take affect when the CPU arch
protocol implementation is registered.
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
Diffstat (limited to 'ArmVirtPkg/ArmVirt.dsc.inc')
| -rw-r--r-- | ArmVirtPkg/ArmVirt.dsc.inc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/ArmVirtPkg/ArmVirt.dsc.inc b/ArmVirtPkg/ArmVirt.dsc.inc index acfb71d3ff..e2d3dcce79 100644 --- a/ArmVirtPkg/ArmVirt.dsc.inc +++ b/ArmVirtPkg/ArmVirt.dsc.inc @@ -386,6 +386,11 @@ #
gEfiMdeModulePkgTokenSpaceGuid.PcdDxeNxMemoryProtectionPolicy|0xC000000000007FD1
+ #
+ # Enable the non-executable DXE stack. (This gets set up by DxeIpl)
+ #
+ gEfiMdeModulePkgTokenSpaceGuid.PcdSetNxForStack|TRUE
+
[PcdsFixedAtBuild.ARM]
gEmbeddedTokenSpaceGuid.PcdPrePiCpuMemorySize|40
|