efi/libstub: Enable reset attack mitigation

[mirror_ubuntu-bionic-kernel.git] / arch / x86 / boot / compressed / eboot.c

diff --git a/arch/x86/boot/compressed/eboot.c b/arch/x86/boot/compressed/eboot.c
index c3e869eaef0c625b98f5bcafabd1a2aba02ab8c7..a1686f3dc295b0aa79084a33bf0adfecf9d57b1b 100644 (file)
--- a/arch/x86/boot/compressed/eboot.c
+++ b/arch/x86/boot/compressed/eboot.c
@@ -997,6 +997,9 @@ struct boot_params *efi_main(struct efi_config *c,
        if (boot_params->secure_boot == efi_secureboot_mode_unset)
                boot_params->secure_boot = efi_get_secureboot(sys_table);
 
+       /* Ask the firmware to clear memory on unclean shutdown */
+       efi_enable_reset_attack_mitigation(sys_table);
+
        setup_graphics(boot_params);
 
        setup_efi_pci(boot_params);