diff options
| author | Hao Wu <hao.a.wu@intel.com> | 2018-09-13 15:11:35 +0800 |
|---|---|---|
| committer | Hao Wu <hao.a.wu@intel.com> | 2018-11-14 09:09:57 +0800 |
| commit | 84f5807928803a973838f5b096a99c0558f3ec70 (patch) | |
| tree | 1cff3b79c134345d0a25fbecf33650b4ec74f789 /MdePkg/Library/BaseLib/BaseLib.inf | |
| parent | dc52d246099c7a4e769b310b5c86bf28801bca6c (diff) | |
| download | edk2-84f5807928803a973838f5b096a99c0558f3ec70.tar.gz edk2-84f5807928803a973838f5b096a99c0558f3ec70.tar.bz2 edk2-84f5807928803a973838f5b096a99c0558f3ec70.zip | |
MdePkg/BaseLib: Add new AsmLfence API
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1193
This commit will add a new BaseLib API AsmLfence(). This API will perform
a serializing operation on all load-from-memory instructions that were
issued prior to the call of this function. Please note that this API is
only available on IA-32 and x64.
The purpose of adding this API is to mitigate of the [CVE-2017-5753]
Bounds Check Bypass issue when untrusted data are being processed within
SMM. More details can be referred at the 'Bounds check bypass mitigation'
section at the below link:
https://software.intel.com/security-software-guidance/insights/host-firmware-speculative-execution-side-channel-mitigation
Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: Leif Lindholm <leif.lindholm@linaro.org>
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
Reviewed-by: Liming Gao <liming.gao@intel.com>
Acked-by: Laszlo Ersek <lersek@redhat.com>
Regression-tested-by: Laszlo Ersek <lersek@redhat.com>
(cherry picked from commit 2ecd829972f8553de83fbf943c5b89863999d7c8)
Diffstat (limited to 'MdePkg/Library/BaseLib/BaseLib.inf')
| -rw-r--r-- | MdePkg/Library/BaseLib/BaseLib.inf | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/MdePkg/Library/BaseLib/BaseLib.inf b/MdePkg/Library/BaseLib/BaseLib.inf index 320ac457ea..0b81bcfad9 100644 --- a/MdePkg/Library/BaseLib/BaseLib.inf +++ b/MdePkg/Library/BaseLib/BaseLib.inf @@ -67,6 +67,8 @@ BaseLibInternals.h
[Sources.Ia32]
+ Ia32/Lfence.nasm
+
Ia32/Wbinvd.c | MSFT
Ia32/WriteMm7.c | MSFT
Ia32/WriteMm6.c | MSFT
@@ -447,6 +449,7 @@ X64/EnableCache.asm
X64/DisableCache.nasm
X64/DisableCache.asm
+ X64/Lfence.nasm
X64/CpuBreakpoint.c | MSFT
X64/WriteMsr64.c | MSFT
|