tree f405d23db129aec3c1aacb178aeeaafc4ee3641e
parent 8304ca4cb60005fae4335bbe98af3ea483c2ffb5
author Arthur Heymans <arthur@aheymans.xyz> 1574872477 +0100
committer Felix Held <felix-coreboot@felixheld.de> 1649686347 +0000

cpu/x86/smm: Add sinkhole mitigation to relocatable smmstub

The sinkhole exploit exists in placing the lapic base such that it
messes with GDT. This can be mitigated by checking the lapic MSR
against the current program counter.

Change-Id: I49927c4f4218552b732bac8aae551d845ad7f079
Signed-off-by: Arthur Heymans <arthur@aheymans.xyz>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/37289
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Angel Pons <th3fanbus@gmail.com>