]> git.proxmox.com Git - mirror_edk2.git/blobdiff - MdeModulePkg/Core/DxeIplPeim/X64/VirtualMemory.c
UefiCpuPkg: Move AsmRelocateApLoopStart from Mpfuncs.nasm to AmdSev.nasm
[mirror_edk2.git] / MdeModulePkg / Core / DxeIplPeim / X64 / VirtualMemory.c
index 2389f3eb485b2e5919ac01439ec0b4a8f800a804..18b121d7688c5ddc2515f785dd14335814f132a6 100644 (file)
@@ -15,7 +15,7 @@
     2) IA-32 Intel(R) Architecture Software Developer's Manual Volume 2:Instruction Set Reference, Intel\r
     3) IA-32 Intel(R) Architecture Software Developer's Manual Volume 3:System Programmer's Guide, Intel\r
 \r
-Copyright (c) 2006 - 2019, Intel Corporation. All rights reserved.<BR>\r
+Copyright (c) 2006 - 2022, Intel Corporation. All rights reserved.<BR>\r
 Copyright (c) 2017, AMD Incorporated. All rights reserved.<BR>\r
 \r
 SPDX-License-Identifier: BSD-2-Clause-Patent\r
@@ -29,7 +29,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 //\r
 // Global variable to keep track current available memory used as page table.\r
 //\r
-PAGE_TABLE_POOL   *mPageTablePool = NULL;\r
+PAGE_TABLE_POOL  *mPageTablePool = NULL;\r
 \r
 /**\r
   Clear legacy memory located at the first 4K-page, if available.\r
@@ -42,39 +42,50 @@ PAGE_TABLE_POOL   *mPageTablePool = NULL;
 **/\r
 VOID\r
 ClearFirst4KPage (\r
-  IN  VOID *HobStart\r
+  IN  VOID  *HobStart\r
   )\r
 {\r
-  EFI_PEI_HOB_POINTERS          RscHob;\r
-  EFI_PEI_HOB_POINTERS          MemHob;\r
-  BOOLEAN                       DoClear;\r
+  EFI_PEI_HOB_POINTERS  RscHob;\r
+  EFI_PEI_HOB_POINTERS  MemHob;\r
+  BOOLEAN               DoClear;\r
 \r
   RscHob.Raw = HobStart;\r
   MemHob.Raw = HobStart;\r
-  DoClear = FALSE;\r
+  DoClear    = FALSE;\r
 \r
   //\r
   // Check if page 0 exists and free\r
   //\r
-  while ((RscHob.Raw = GetNextHob (EFI_HOB_TYPE_RESOURCE_DESCRIPTOR,\r
-                                   RscHob.Raw)) != NULL) {\r
-    if (RscHob.ResourceDescriptor->ResourceType == EFI_RESOURCE_SYSTEM_MEMORY &&\r
-        RscHob.ResourceDescriptor->PhysicalStart == 0) {\r
+  while ((RscHob.Raw = GetNextHob (\r
+                         EFI_HOB_TYPE_RESOURCE_DESCRIPTOR,\r
+                         RscHob.Raw\r
+                         )) != NULL)\r
+  {\r
+    if ((RscHob.ResourceDescriptor->ResourceType == EFI_RESOURCE_SYSTEM_MEMORY) &&\r
+        (RscHob.ResourceDescriptor->PhysicalStart == 0))\r
+    {\r
       DoClear = TRUE;\r
       //\r
       // Make sure memory at 0-4095 has not been allocated.\r
       //\r
-      while ((MemHob.Raw = GetNextHob (EFI_HOB_TYPE_MEMORY_ALLOCATION,\r
-                                       MemHob.Raw)) != NULL) {\r
+      while ((MemHob.Raw = GetNextHob (\r
+                             EFI_HOB_TYPE_MEMORY_ALLOCATION,\r
+                             MemHob.Raw\r
+                             )) != NULL)\r
+      {\r
         if (MemHob.MemoryAllocation->AllocDescriptor.MemoryBaseAddress\r
-            < EFI_PAGE_SIZE) {\r
+            < EFI_PAGE_SIZE)\r
+        {\r
           DoClear = FALSE;\r
           break;\r
         }\r
+\r
         MemHob.Raw = GET_NEXT_HOB (MemHob);\r
       }\r
+\r
       break;\r
     }\r
+\r
     RscHob.Raw = GET_NEXT_HOB (RscHob);\r
   }\r
 \r
@@ -113,9 +124,9 @@ IsExecuteDisableBitAvailable (
   VOID\r
   )\r
 {\r
-  UINT32            RegEax;\r
-  UINT32            RegEdx;\r
-  BOOLEAN           Available;\r
+  UINT32   RegEax;\r
+  UINT32   RegEdx;\r
+  BOOLEAN  Available;\r
 \r
   Available = FALSE;\r
   AsmCpuid (0x80000000, &RegEax, NULL, NULL, NULL);\r
@@ -166,11 +177,13 @@ EnableExecuteDisableBit (
   VOID\r
   )\r
 {\r
-  UINT64           MsrRegisters;\r
+  UINT64  MsrRegisters;\r
 \r
   MsrRegisters = AsmReadMsr64 (0xC0000080);\r
-  MsrRegisters |= BIT11;\r
-  AsmWriteMsr64 (0xC0000080, MsrRegisters);\r
+  if ((MsrRegisters & BIT11) == 0) {\r
+    MsrRegisters |= BIT11;\r
+    AsmWriteMsr64 (0xC0000080, MsrRegisters);\r
+  }\r
 }\r
 \r
 /**\r
@@ -181,24 +194,28 @@ EnableExecuteDisableBit (
   @param Size         Size of the given physical memory.\r
   @param StackBase    Base address of stack.\r
   @param StackSize    Size of stack.\r
+  @param GhcbBase     Base address of GHCB pages.\r
+  @param GhcbSize     Size of GHCB area.\r
 \r
   @retval TRUE      Page table should be split.\r
   @retval FALSE     Page table should not be split.\r
 **/\r
 BOOLEAN\r
 ToSplitPageTable (\r
-  IN EFI_PHYSICAL_ADDRESS               Address,\r
-  IN UINTN                              Size,\r
-  IN EFI_PHYSICAL_ADDRESS               StackBase,\r
-  IN UINTN                              StackSize\r
+  IN EFI_PHYSICAL_ADDRESS  Address,\r
+  IN UINTN                 Size,\r
+  IN EFI_PHYSICAL_ADDRESS  StackBase,\r
+  IN UINTN                 StackSize,\r
+  IN EFI_PHYSICAL_ADDRESS  GhcbBase,\r
+  IN UINTN                 GhcbSize\r
   )\r
 {\r
-  if (IsNullDetectionEnabled () && Address == 0) {\r
+  if (IsNullDetectionEnabled () && (Address == 0)) {\r
     return TRUE;\r
   }\r
 \r
   if (PcdGetBool (PcdCpuStackGuard)) {\r
-    if (StackBase >= Address && StackBase < (Address + Size)) {\r
+    if ((StackBase >= Address) && (StackBase < (Address + Size))) {\r
       return TRUE;\r
     }\r
   }\r
@@ -209,8 +226,15 @@ ToSplitPageTable (
     }\r
   }\r
 \r
+  if (GhcbBase != 0) {\r
+    if ((Address < GhcbBase + GhcbSize) && ((Address + Size) > GhcbBase)) {\r
+      return TRUE;\r
+    }\r
+  }\r
+\r
   return FALSE;\r
 }\r
+\r
 /**\r
   Initialize a buffer pool for page table use only.\r
 \r
@@ -230,18 +254,18 @@ ToSplitPageTable (
 **/\r
 BOOLEAN\r
 InitializePageTablePool (\r
-  IN UINTN           PoolPages\r
+  IN UINTN  PoolPages\r
   )\r
 {\r
-  VOID          *Buffer;\r
+  VOID  *Buffer;\r
 \r
   //\r
   // Always reserve at least PAGE_TABLE_POOL_UNIT_PAGES, including one page for\r
   // header.\r
   //\r
   PoolPages += 1;   // Add one page for header.\r
-  PoolPages = ((PoolPages - 1) / PAGE_TABLE_POOL_UNIT_PAGES + 1) *\r
-              PAGE_TABLE_POOL_UNIT_PAGES;\r
+  PoolPages  = ((PoolPages - 1) / PAGE_TABLE_POOL_UNIT_PAGES + 1) *\r
+               PAGE_TABLE_POOL_UNIT_PAGES;\r
   Buffer = AllocateAlignedPages (PoolPages, PAGE_TABLE_POOL_ALIGNMENT);\r
   if (Buffer == NULL) {\r
     DEBUG ((DEBUG_ERROR, "ERROR: Out of aligned pages\r\n"));\r
@@ -252,19 +276,19 @@ InitializePageTablePool (
   // Link all pools into a list for easier track later.\r
   //\r
   if (mPageTablePool == NULL) {\r
-    mPageTablePool = Buffer;\r
+    mPageTablePool           = Buffer;\r
     mPageTablePool->NextPool = mPageTablePool;\r
   } else {\r
     ((PAGE_TABLE_POOL *)Buffer)->NextPool = mPageTablePool->NextPool;\r
-    mPageTablePool->NextPool = Buffer;\r
-    mPageTablePool = Buffer;\r
+    mPageTablePool->NextPool              = Buffer;\r
+    mPageTablePool                        = Buffer;\r
   }\r
 \r
   //\r
   // Reserve one page for pool header.\r
   //\r
-  mPageTablePool->FreePages  = PoolPages - 1;\r
-  mPageTablePool->Offset = EFI_PAGES_TO_SIZE (1);\r
+  mPageTablePool->FreePages = PoolPages - 1;\r
+  mPageTablePool->Offset    = EFI_PAGES_TO_SIZE (1);\r
 \r
   return TRUE;\r
 }\r
@@ -288,10 +312,10 @@ InitializePageTablePool (
 **/\r
 VOID *\r
 AllocatePageTableMemory (\r
-  IN UINTN           Pages\r
+  IN UINTN  Pages\r
   )\r
 {\r
-  VOID          *Buffer;\r
+  VOID  *Buffer;\r
 \r
   if (Pages == 0) {\r
     return NULL;\r
@@ -300,8 +324,9 @@ AllocatePageTableMemory (
   //\r
   // Renew the pool if necessary.\r
   //\r
-  if (mPageTablePool == NULL ||\r
-      Pages > mPageTablePool->FreePages) {\r
+  if ((mPageTablePool == NULL) ||\r
+      (Pages > mPageTablePool->FreePages))\r
+  {\r
     if (!InitializePageTablePool (Pages)) {\r
       return NULL;\r
     }\r
@@ -309,8 +334,8 @@ AllocatePageTableMemory (
 \r
   Buffer = (UINT8 *)mPageTablePool + mPageTablePool->Offset;\r
 \r
-  mPageTablePool->Offset     += EFI_PAGES_TO_SIZE (Pages);\r
-  mPageTablePool->FreePages  -= Pages;\r
+  mPageTablePool->Offset    += EFI_PAGES_TO_SIZE (Pages);\r
+  mPageTablePool->FreePages -= Pages;\r
 \r
   return Buffer;\r
 }\r
@@ -322,20 +347,24 @@ AllocatePageTableMemory (
   @param[in, out] PageEntry2M           Pointer to 2M page entry.\r
   @param[in]      StackBase             Stack base address.\r
   @param[in]      StackSize             Stack size.\r
+  @param[in]      GhcbBase              GHCB page area base address.\r
+  @param[in]      GhcbSize              GHCB page area size.\r
 \r
 **/\r
 VOID\r
 Split2MPageTo4K (\r
-  IN EFI_PHYSICAL_ADDRESS               PhysicalAddress,\r
-  IN OUT UINT64                         *PageEntry2M,\r
-  IN EFI_PHYSICAL_ADDRESS               StackBase,\r
-  IN UINTN                              StackSize\r
+  IN EFI_PHYSICAL_ADDRESS  PhysicalAddress,\r
+  IN OUT UINT64            *PageEntry2M,\r
+  IN EFI_PHYSICAL_ADDRESS  StackBase,\r
+  IN UINTN                 StackSize,\r
+  IN EFI_PHYSICAL_ADDRESS  GhcbBase,\r
+  IN UINTN                 GhcbSize\r
   )\r
 {\r
-  EFI_PHYSICAL_ADDRESS                  PhysicalAddress4K;\r
-  UINTN                                 IndexOfPageTableEntries;\r
-  PAGE_TABLE_4K_ENTRY                   *PageTableEntry;\r
-  UINT64                                AddressEncMask;\r
+  EFI_PHYSICAL_ADDRESS  PhysicalAddress4K;\r
+  UINTN                 IndexOfPageTableEntries;\r
+  PAGE_TABLE_4K_ENTRY   *PageTableEntry;\r
+  UINT64                AddressEncMask;\r
 \r
   //\r
   // Make sure AddressEncMask is contained to smallest supported address field\r
@@ -348,26 +377,43 @@ Split2MPageTo4K (
   //\r
   // Fill in 2M page entry.\r
   //\r
-  *PageEntry2M = (UINT64) (UINTN) PageTableEntry | AddressEncMask | IA32_PG_P | IA32_PG_RW;\r
+  *PageEntry2M = (UINT64)(UINTN)PageTableEntry | AddressEncMask | IA32_PG_P | IA32_PG_RW;\r
 \r
   PhysicalAddress4K = PhysicalAddress;\r
   for (IndexOfPageTableEntries = 0; IndexOfPageTableEntries < 512; IndexOfPageTableEntries++, PageTableEntry++, PhysicalAddress4K += SIZE_4KB) {\r
     //\r
     // Fill in the Page Table entries\r
     //\r
-    PageTableEntry->Uint64 = (UINT64) PhysicalAddress4K | AddressEncMask;\r
+    PageTableEntry->Uint64 = (UINT64)PhysicalAddress4K;\r
+\r
+    //\r
+    // The GHCB range consists of two pages per CPU, the GHCB and a\r
+    // per-CPU variable page. The GHCB page needs to be mapped as an\r
+    // unencrypted page while the per-CPU variable page needs to be\r
+    // mapped encrypted. These pages alternate in assignment.\r
+    //\r
+    if (  (GhcbBase == 0)\r
+       || (PhysicalAddress4K < GhcbBase)\r
+       || (PhysicalAddress4K >= GhcbBase + GhcbSize)\r
+       || (((PhysicalAddress4K - GhcbBase) & SIZE_4KB) != 0))\r
+    {\r
+      PageTableEntry->Uint64 |= AddressEncMask;\r
+    }\r
+\r
     PageTableEntry->Bits.ReadWrite = 1;\r
 \r
-    if ((IsNullDetectionEnabled () && PhysicalAddress4K == 0) ||\r
-        (PcdGetBool (PcdCpuStackGuard) && PhysicalAddress4K == StackBase)) {\r
+    if ((IsNullDetectionEnabled () && (PhysicalAddress4K == 0)) ||\r
+        (PcdGetBool (PcdCpuStackGuard) && (PhysicalAddress4K == StackBase)))\r
+    {\r
       PageTableEntry->Bits.Present = 0;\r
     } else {\r
       PageTableEntry->Bits.Present = 1;\r
     }\r
 \r
-    if (PcdGetBool (PcdSetNxForStack)\r
-        && (PhysicalAddress4K >= StackBase)\r
-        && (PhysicalAddress4K < StackBase + StackSize)) {\r
+    if (  PcdGetBool (PcdSetNxForStack)\r
+       && (PhysicalAddress4K >= StackBase)\r
+       && (PhysicalAddress4K < StackBase + StackSize))\r
+    {\r
       //\r
       // Set Nx bit for stack.\r
       //\r
@@ -383,20 +429,24 @@ Split2MPageTo4K (
   @param[in, out] PageEntry1G           Pointer to 1G page entry.\r
   @param[in]      StackBase             Stack base address.\r
   @param[in]      StackSize             Stack size.\r
+  @param[in]      GhcbBase              GHCB page area base address.\r
+  @param[in]      GhcbSize              GHCB page area size.\r
 \r
 **/\r
 VOID\r
 Split1GPageTo2M (\r
-  IN EFI_PHYSICAL_ADDRESS               PhysicalAddress,\r
-  IN OUT UINT64                         *PageEntry1G,\r
-  IN EFI_PHYSICAL_ADDRESS               StackBase,\r
-  IN UINTN                              StackSize\r
+  IN EFI_PHYSICAL_ADDRESS  PhysicalAddress,\r
+  IN OUT UINT64            *PageEntry1G,\r
+  IN EFI_PHYSICAL_ADDRESS  StackBase,\r
+  IN UINTN                 StackSize,\r
+  IN EFI_PHYSICAL_ADDRESS  GhcbBase,\r
+  IN UINTN                 GhcbSize\r
   )\r
 {\r
-  EFI_PHYSICAL_ADDRESS                  PhysicalAddress2M;\r
-  UINTN                                 IndexOfPageDirectoryEntries;\r
-  PAGE_TABLE_ENTRY                      *PageDirectoryEntry;\r
-  UINT64                                AddressEncMask;\r
+  EFI_PHYSICAL_ADDRESS  PhysicalAddress2M;\r
+  UINTN                 IndexOfPageDirectoryEntries;\r
+  PAGE_TABLE_ENTRY      *PageDirectoryEntry;\r
+  UINT64                AddressEncMask;\r
 \r
   //\r
   // Make sure AddressEncMask is contained to smallest supported address field\r
@@ -409,23 +459,23 @@ Split1GPageTo2M (
   //\r
   // Fill in 1G page entry.\r
   //\r
-  *PageEntry1G = (UINT64) (UINTN) PageDirectoryEntry | AddressEncMask | IA32_PG_P | IA32_PG_RW;\r
+  *PageEntry1G = (UINT64)(UINTN)PageDirectoryEntry | AddressEncMask | IA32_PG_P | IA32_PG_RW;\r
 \r
   PhysicalAddress2M = PhysicalAddress;\r
   for (IndexOfPageDirectoryEntries = 0; IndexOfPageDirectoryEntries < 512; IndexOfPageDirectoryEntries++, PageDirectoryEntry++, PhysicalAddress2M += SIZE_2MB) {\r
-    if (ToSplitPageTable (PhysicalAddress2M, SIZE_2MB, StackBase, StackSize)) {\r
+    if (ToSplitPageTable (PhysicalAddress2M, SIZE_2MB, StackBase, StackSize, GhcbBase, GhcbSize)) {\r
       //\r
       // Need to split this 2M page that covers NULL or stack range.\r
       //\r
-      Split2MPageTo4K (PhysicalAddress2M, (UINT64 *) PageDirectoryEntry, StackBase, StackSize);\r
+      Split2MPageTo4K (PhysicalAddress2M, (UINT64 *)PageDirectoryEntry, StackBase, StackSize, GhcbBase, GhcbSize);\r
     } else {\r
       //\r
       // Fill in the Page Directory entries\r
       //\r
-      PageDirectoryEntry->Uint64 = (UINT64) PhysicalAddress2M | AddressEncMask;\r
+      PageDirectoryEntry->Uint64         = (UINT64)PhysicalAddress2M | AddressEncMask;\r
       PageDirectoryEntry->Bits.ReadWrite = 1;\r
-      PageDirectoryEntry->Bits.Present = 1;\r
-      PageDirectoryEntry->Bits.MustBe1 = 1;\r
+      PageDirectoryEntry->Bits.Present   = 1;\r
+      PageDirectoryEntry->Bits.MustBe1   = 1;\r
     }\r
   }\r
 }\r
@@ -440,9 +490,9 @@ Split1GPageTo2M (
 **/\r
 VOID\r
 SetPageTablePoolReadOnly (\r
-  IN  UINTN                             PageTableBase,\r
-  IN  EFI_PHYSICAL_ADDRESS              Address,\r
-  IN  BOOLEAN                           Level4Paging\r
+  IN  UINTN                 PageTableBase,\r
+  IN  EFI_PHYSICAL_ADDRESS  Address,\r
+  IN  BOOLEAN               Level4Paging\r
   )\r
 {\r
   UINTN                 Index;\r
@@ -482,13 +532,13 @@ SetPageTablePoolReadOnly (
   LevelSize[3] = SIZE_1GB;\r
   LevelSize[4] = SIZE_512GB;\r
 \r
-  AddressEncMask  = PcdGet64 (PcdPteMemoryEncryptionAddressOrMask) &\r
-                    PAGING_1G_ADDRESS_MASK_64;\r
-  PageTable       = (UINT64 *)(UINTN)PageTableBase;\r
-  PoolUnitSize    = PAGE_TABLE_POOL_UNIT_SIZE;\r
+  AddressEncMask = PcdGet64 (PcdPteMemoryEncryptionAddressOrMask) &\r
+                   PAGING_1G_ADDRESS_MASK_64;\r
+  PageTable    = (UINT64 *)(UINTN)PageTableBase;\r
+  PoolUnitSize = PAGE_TABLE_POOL_UNIT_SIZE;\r
 \r
   for (Level = (Level4Paging) ? 4 : 3; Level > 0; --Level) {\r
-    Index = ((UINTN)RShiftU64 (Address, LevelShift[Level]));\r
+    Index  = ((UINTN)RShiftU64 (Address, LevelShift[Level]));\r
     Index &= PAGING_PAE_INDEX_MASK;\r
 \r
     PageAttr = PageTable[Index];\r
@@ -516,14 +566,13 @@ SetPageTablePoolReadOnly (
           ASSERT (Index < EFI_PAGE_SIZE/sizeof (UINT64));\r
 \r
           PageTable[Index] &= ~(UINT64)IA32_PG_RW;\r
-          PoolUnitSize    -= LevelSize[Level];\r
+          PoolUnitSize     -= LevelSize[Level];\r
 \r
           ++Index;\r
         }\r
       }\r
 \r
       break;\r
-\r
     } else {\r
       //\r
       // The smaller granularity of page must be needed.\r
@@ -535,18 +584,20 @@ SetPageTablePoolReadOnly (
 \r
       PhysicalAddress = PageAttr & LevelMask[Level];\r
       for (EntryIndex = 0;\r
-            EntryIndex < EFI_PAGE_SIZE/sizeof (UINT64);\r
-            ++EntryIndex) {\r
+           EntryIndex < EFI_PAGE_SIZE/sizeof (UINT64);\r
+           ++EntryIndex)\r
+      {\r
         NewPageTable[EntryIndex] = PhysicalAddress  | AddressEncMask |\r
                                    IA32_PG_P | IA32_PG_RW;\r
         if (Level > 2) {\r
           NewPageTable[EntryIndex] |= IA32_PG_PS;\r
         }\r
+\r
         PhysicalAddress += LevelSize[Level - 1];\r
       }\r
 \r
       PageTable[Index] = (UINT64)(UINTN)NewPageTable | AddressEncMask |\r
-                                        IA32_PG_P | IA32_PG_RW;\r
+                         IA32_PG_P | IA32_PG_RW;\r
       PageTable = NewPageTable;\r
     }\r
   }\r
@@ -561,31 +612,26 @@ SetPageTablePoolReadOnly (
 **/\r
 VOID\r
 EnablePageTableProtection (\r
-  IN  UINTN     PageTableBase,\r
-  IN  BOOLEAN   Level4Paging\r
+  IN  UINTN    PageTableBase,\r
+  IN  BOOLEAN  Level4Paging\r
   )\r
 {\r
-  PAGE_TABLE_POOL         *HeadPool;\r
-  PAGE_TABLE_POOL         *Pool;\r
-  UINT64                  PoolSize;\r
-  EFI_PHYSICAL_ADDRESS    Address;\r
+  PAGE_TABLE_POOL       *HeadPool;\r
+  PAGE_TABLE_POOL       *Pool;\r
+  UINT64                PoolSize;\r
+  EFI_PHYSICAL_ADDRESS  Address;\r
 \r
   if (mPageTablePool == NULL) {\r
     return;\r
   }\r
 \r
   //\r
-  // Disable write protection, because we need to mark page table to be write\r
-  // protected.\r
-  //\r
-  AsmWriteCr0 (AsmReadCr0() & ~CR0_WP);\r
-\r
-  //\r
+  // No need to clear CR0.WP since PageTableBase has't been written to CR3 yet.\r
   // SetPageTablePoolReadOnly might update mPageTablePool. It's safer to\r
   // remember original one in advance.\r
   //\r
   HeadPool = mPageTablePool;\r
-  Pool = HeadPool;\r
+  Pool     = HeadPool;\r
   do {\r
     Address  = (EFI_PHYSICAL_ADDRESS)(UINTN)Pool;\r
     PoolSize = Pool->Offset + EFI_PAGES_TO_SIZE (Pool->FreePages);\r
@@ -596,9 +642,9 @@ EnablePageTableProtection (
     // protection to them one by one.\r
     //\r
     while (PoolSize > 0) {\r
-      SetPageTablePoolReadOnly(PageTableBase, Address, Level4Paging);\r
-      Address   += PAGE_TABLE_POOL_UNIT_SIZE;\r
-      PoolSize  -= PAGE_TABLE_POOL_UNIT_SIZE;\r
+      SetPageTablePoolReadOnly (PageTableBase, Address, Level4Paging);\r
+      Address  += PAGE_TABLE_POOL_UNIT_SIZE;\r
+      PoolSize -= PAGE_TABLE_POOL_UNIT_SIZE;\r
     }\r
 \r
     Pool = Pool->NextPool;\r
@@ -607,7 +653,7 @@ EnablePageTableProtection (
   //\r
   // Enable write protection, after page table attribute updated.\r
   //\r
-  AsmWriteCr0 (AsmReadCr0() | CR0_WP);\r
+  AsmWriteCr0 (AsmReadCr0 () | CR0_WP);\r
 }\r
 \r
 /**\r
@@ -616,41 +662,50 @@ EnablePageTableProtection (
 \r
   @param[in] StackBase  Stack base address.\r
   @param[in] StackSize  Stack size.\r
+  @param[in] GhcbBase   GHCB base address.\r
+  @param[in] GhcbSize   GHCB size.\r
 \r
   @return The address of 4 level page map.\r
 \r
 **/\r
 UINTN\r
 CreateIdentityMappingPageTables (\r
-  IN EFI_PHYSICAL_ADDRESS   StackBase,\r
-  IN UINTN                  StackSize\r
+  IN EFI_PHYSICAL_ADDRESS  StackBase,\r
+  IN UINTN                 StackSize,\r
+  IN EFI_PHYSICAL_ADDRESS  GhcbBase,\r
+  IN UINTN                 GhcbSize\r
   )\r
 {\r
-  UINT32                                        RegEax;\r
-  CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS_ECX   EcxFlags;\r
-  UINT32                                        RegEdx;\r
-  UINT8                                         PhysicalAddressBits;\r
-  EFI_PHYSICAL_ADDRESS                          PageAddress;\r
-  UINTN                                         IndexOfPml5Entries;\r
-  UINTN                                         IndexOfPml4Entries;\r
-  UINTN                                         IndexOfPdpEntries;\r
-  UINTN                                         IndexOfPageDirectoryEntries;\r
-  UINT32                                        NumberOfPml5EntriesNeeded;\r
-  UINT32                                        NumberOfPml4EntriesNeeded;\r
-  UINT32                                        NumberOfPdpEntriesNeeded;\r
-  PAGE_MAP_AND_DIRECTORY_POINTER                *PageMapLevel5Entry;\r
-  PAGE_MAP_AND_DIRECTORY_POINTER                *PageMapLevel4Entry;\r
-  PAGE_MAP_AND_DIRECTORY_POINTER                *PageMap;\r
-  PAGE_MAP_AND_DIRECTORY_POINTER                *PageDirectoryPointerEntry;\r
-  PAGE_TABLE_ENTRY                              *PageDirectoryEntry;\r
-  UINTN                                         TotalPagesNum;\r
-  UINTN                                         BigPageAddress;\r
-  VOID                                          *Hob;\r
-  BOOLEAN                                       Page5LevelSupport;\r
-  BOOLEAN                                       Page1GSupport;\r
-  PAGE_TABLE_1G_ENTRY                           *PageDirectory1GEntry;\r
-  UINT64                                        AddressEncMask;\r
-  IA32_CR4                                      Cr4;\r
+  UINT32                                       RegEax;\r
+  CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS_ECX  EcxFlags;\r
+  UINT32                                       RegEdx;\r
+  UINT8                                        PhysicalAddressBits;\r
+  EFI_PHYSICAL_ADDRESS                         PageAddress;\r
+  UINTN                                        IndexOfPml5Entries;\r
+  UINTN                                        IndexOfPml4Entries;\r
+  UINTN                                        IndexOfPdpEntries;\r
+  UINTN                                        IndexOfPageDirectoryEntries;\r
+  UINT32                                       NumberOfPml5EntriesNeeded;\r
+  UINT32                                       NumberOfPml4EntriesNeeded;\r
+  UINT32                                       NumberOfPdpEntriesNeeded;\r
+  PAGE_MAP_AND_DIRECTORY_POINTER               *PageMapLevel5Entry;\r
+  PAGE_MAP_AND_DIRECTORY_POINTER               *PageMapLevel4Entry;\r
+  PAGE_MAP_AND_DIRECTORY_POINTER               *PageMap;\r
+  PAGE_MAP_AND_DIRECTORY_POINTER               *PageDirectoryPointerEntry;\r
+  PAGE_TABLE_ENTRY                             *PageDirectoryEntry;\r
+  UINTN                                        TotalPagesNum;\r
+  UINTN                                        BigPageAddress;\r
+  VOID                                         *Hob;\r
+  BOOLEAN                                      Page5LevelSupport;\r
+  BOOLEAN                                      Page1GSupport;\r
+  PAGE_TABLE_1G_ENTRY                          *PageDirectory1GEntry;\r
+  UINT64                                       AddressEncMask;\r
+  IA32_CR4                                     Cr4;\r
+\r
+  //\r
+  // Set PageMapLevel5Entry to suppress incorrect compiler/analyzer warnings\r
+  //\r
+  PageMapLevel5Entry = NULL;\r
 \r
   //\r
   // Make sure AddressEncMask is contained to smallest supported address field\r
@@ -658,7 +713,7 @@ CreateIdentityMappingPageTables (
   AddressEncMask = PcdGet64 (PcdPteMemoryEncryptionAddressOrMask) & PAGING_1G_ADDRESS_MASK_64;\r
 \r
   Page1GSupport = FALSE;\r
-  if (PcdGetBool(PcdUse1GPageTable)) {\r
+  if (PcdGetBool (PcdUse1GPageTable)) {\r
     AsmCpuid (0x80000000, &RegEax, NULL, NULL, NULL);\r
     if (RegEax >= 0x80000001) {\r
       AsmCpuid (0x80000001, NULL, NULL, NULL, &RegEdx);\r
@@ -673,12 +728,12 @@ CreateIdentityMappingPageTables (
   //\r
   Hob = GetFirstHob (EFI_HOB_TYPE_CPU);\r
   if (Hob != NULL) {\r
-    PhysicalAddressBits = ((EFI_HOB_CPU *) Hob)->SizeOfMemorySpace;\r
+    PhysicalAddressBits = ((EFI_HOB_CPU *)Hob)->SizeOfMemorySpace;\r
   } else {\r
     AsmCpuid (0x80000000, &RegEax, NULL, NULL, NULL);\r
     if (RegEax >= 0x80000008) {\r
       AsmCpuid (0x80000008, &RegEax, NULL, NULL, NULL);\r
-      PhysicalAddressBits = (UINT8) RegEax;\r
+      PhysicalAddressBits = (UINT8)RegEax;\r
     } else {\r
       PhysicalAddressBits = 36;\r
     }\r
@@ -687,8 +742,12 @@ CreateIdentityMappingPageTables (
   Page5LevelSupport = FALSE;\r
   if (PcdGetBool (PcdUse5LevelPageTable)) {\r
     AsmCpuidEx (\r
-      CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS, CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS_SUB_LEAF_INFO, NULL,\r
-      &EcxFlags.Uint32, NULL, NULL\r
+      CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS,\r
+      CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS_SUB_LEAF_INFO,\r
+      NULL,\r
+      NULL,\r
+      &EcxFlags.Uint32,\r
+      NULL\r
       );\r
     if (EcxFlags.Bits.FiveLevelPage != 0) {\r
       Page5LevelSupport = TRUE;\r
@@ -703,7 +762,7 @@ CreateIdentityMappingPageTables (
   //  due to either unsupported by HW, or disabled by PCD.\r
   //\r
   ASSERT (PhysicalAddressBits <= 52);\r
-  if (!Page5LevelSupport && PhysicalAddressBits > 48) {\r
+  if (!Page5LevelSupport && (PhysicalAddressBits > 48)) {\r
     PhysicalAddressBits = 48;\r
   }\r
 \r
@@ -712,19 +771,19 @@ CreateIdentityMappingPageTables (
   //\r
   NumberOfPml5EntriesNeeded = 1;\r
   if (PhysicalAddressBits > 48) {\r
-    NumberOfPml5EntriesNeeded = (UINT32) LShiftU64 (1, PhysicalAddressBits - 48);\r
-    PhysicalAddressBits = 48;\r
+    NumberOfPml5EntriesNeeded = (UINT32)LShiftU64 (1, PhysicalAddressBits - 48);\r
+    PhysicalAddressBits       = 48;\r
   }\r
 \r
   NumberOfPml4EntriesNeeded = 1;\r
   if (PhysicalAddressBits > 39) {\r
-    NumberOfPml4EntriesNeeded = (UINT32) LShiftU64 (1, PhysicalAddressBits - 39);\r
-    PhysicalAddressBits = 39;\r
+    NumberOfPml4EntriesNeeded = (UINT32)LShiftU64 (1, PhysicalAddressBits - 39);\r
+    PhysicalAddressBits       = 39;\r
   }\r
 \r
   NumberOfPdpEntriesNeeded = 1;\r
   ASSERT (PhysicalAddressBits > 30);\r
-  NumberOfPdpEntriesNeeded = (UINT32) LShiftU64 (1, PhysicalAddressBits - 30);\r
+  NumberOfPdpEntriesNeeded = (UINT32)LShiftU64 (1, PhysicalAddressBits - 30);\r
 \r
   //\r
   // Pre-allocate big pages to avoid later allocations.\r
@@ -742,17 +801,22 @@ CreateIdentityMappingPageTables (
     TotalPagesNum--;\r
   }\r
 \r
-  DEBUG ((DEBUG_INFO, "Pml5=%u Pml4=%u Pdp=%u TotalPage=%Lu\n",\r
-    NumberOfPml5EntriesNeeded, NumberOfPml4EntriesNeeded,\r
-    NumberOfPdpEntriesNeeded, (UINT64)TotalPagesNum));\r
+  DEBUG ((\r
+    DEBUG_INFO,\r
+    "Pml5=%u Pml4=%u Pdp=%u TotalPage=%Lu\n",\r
+    NumberOfPml5EntriesNeeded,\r
+    NumberOfPml4EntriesNeeded,\r
+    NumberOfPdpEntriesNeeded,\r
+    (UINT64)TotalPagesNum\r
+    ));\r
 \r
-  BigPageAddress = (UINTN) AllocatePageTableMemory (TotalPagesNum);\r
+  BigPageAddress = (UINTN)AllocatePageTableMemory (TotalPagesNum);\r
   ASSERT (BigPageAddress != 0);\r
 \r
   //\r
   // By architecture only one PageMapLevel4 exists - so lets allocate storage for it.\r
   //\r
-  PageMap         = (VOID *) BigPageAddress;\r
+  PageMap = (VOID *)BigPageAddress;\r
   if (Page5LevelSupport) {\r
     //\r
     // By architecture only one PageMapLevel5 exists - so lets allocate storage for it.\r
@@ -760,94 +824,98 @@ CreateIdentityMappingPageTables (
     PageMapLevel5Entry = PageMap;\r
     BigPageAddress    += SIZE_4KB;\r
   }\r
-  PageAddress        = 0;\r
+\r
+  PageAddress = 0;\r
 \r
   for ( IndexOfPml5Entries = 0\r
-      ; IndexOfPml5Entries < NumberOfPml5EntriesNeeded\r
-      ; IndexOfPml5Entries++) {\r
+        ; IndexOfPml5Entries < NumberOfPml5EntriesNeeded\r
+        ; IndexOfPml5Entries++)\r
+  {\r
     //\r
     // Each PML5 entry points to a page of PML4 entires.\r
     // So lets allocate space for them and fill them in in the IndexOfPml4Entries loop.\r
     // When 5-Level Paging is disabled, below allocation happens only once.\r
     //\r
-    PageMapLevel4Entry = (VOID *) BigPageAddress;\r
+    PageMapLevel4Entry = (VOID *)BigPageAddress;\r
     BigPageAddress    += SIZE_4KB;\r
 \r
     if (Page5LevelSupport) {\r
       //\r
       // Make a PML5 Entry\r
       //\r
-      PageMapLevel5Entry->Uint64 = (UINT64) (UINTN) PageMapLevel4Entry | AddressEncMask;\r
+      PageMapLevel5Entry->Uint64         = (UINT64)(UINTN)PageMapLevel4Entry | AddressEncMask;\r
       PageMapLevel5Entry->Bits.ReadWrite = 1;\r
       PageMapLevel5Entry->Bits.Present   = 1;\r
       PageMapLevel5Entry++;\r
     }\r
 \r
     for ( IndexOfPml4Entries = 0\r
-        ; IndexOfPml4Entries < (NumberOfPml5EntriesNeeded == 1 ? NumberOfPml4EntriesNeeded : 512)\r
-        ; IndexOfPml4Entries++, PageMapLevel4Entry++) {\r
+          ; IndexOfPml4Entries < (NumberOfPml5EntriesNeeded == 1 ? NumberOfPml4EntriesNeeded : 512)\r
+          ; IndexOfPml4Entries++, PageMapLevel4Entry++)\r
+    {\r
       //\r
       // Each PML4 entry points to a page of Page Directory Pointer entires.\r
       // So lets allocate space for them and fill them in in the IndexOfPdpEntries loop.\r
       //\r
-      PageDirectoryPointerEntry = (VOID *) BigPageAddress;\r
-      BigPageAddress += SIZE_4KB;\r
+      PageDirectoryPointerEntry = (VOID *)BigPageAddress;\r
+      BigPageAddress           += SIZE_4KB;\r
 \r
       //\r
       // Make a PML4 Entry\r
       //\r
-      PageMapLevel4Entry->Uint64 = (UINT64)(UINTN)PageDirectoryPointerEntry | AddressEncMask;\r
+      PageMapLevel4Entry->Uint64         = (UINT64)(UINTN)PageDirectoryPointerEntry | AddressEncMask;\r
       PageMapLevel4Entry->Bits.ReadWrite = 1;\r
-      PageMapLevel4Entry->Bits.Present = 1;\r
+      PageMapLevel4Entry->Bits.Present   = 1;\r
 \r
       if (Page1GSupport) {\r
-        PageDirectory1GEntry = (VOID *) PageDirectoryPointerEntry;\r
+        PageDirectory1GEntry = (VOID *)PageDirectoryPointerEntry;\r
 \r
         for (IndexOfPageDirectoryEntries = 0; IndexOfPageDirectoryEntries < 512; IndexOfPageDirectoryEntries++, PageDirectory1GEntry++, PageAddress += SIZE_1GB) {\r
-          if (ToSplitPageTable (PageAddress, SIZE_1GB, StackBase, StackSize)) {\r
-            Split1GPageTo2M (PageAddress, (UINT64 *) PageDirectory1GEntry, StackBase, StackSize);\r
+          if (ToSplitPageTable (PageAddress, SIZE_1GB, StackBase, StackSize, GhcbBase, GhcbSize)) {\r
+            Split1GPageTo2M (PageAddress, (UINT64 *)PageDirectory1GEntry, StackBase, StackSize, GhcbBase, GhcbSize);\r
           } else {\r
             //\r
             // Fill in the Page Directory entries\r
             //\r
-            PageDirectory1GEntry->Uint64 = (UINT64)PageAddress | AddressEncMask;\r
+            PageDirectory1GEntry->Uint64         = (UINT64)PageAddress | AddressEncMask;\r
             PageDirectory1GEntry->Bits.ReadWrite = 1;\r
-            PageDirectory1GEntry->Bits.Present = 1;\r
-            PageDirectory1GEntry->Bits.MustBe1 = 1;\r
+            PageDirectory1GEntry->Bits.Present   = 1;\r
+            PageDirectory1GEntry->Bits.MustBe1   = 1;\r
           }\r
         }\r
       } else {\r
         for ( IndexOfPdpEntries = 0\r
-            ; IndexOfPdpEntries < (NumberOfPml4EntriesNeeded == 1 ? NumberOfPdpEntriesNeeded : 512)\r
-            ; IndexOfPdpEntries++, PageDirectoryPointerEntry++) {\r
+              ; IndexOfPdpEntries < (NumberOfPml4EntriesNeeded == 1 ? NumberOfPdpEntriesNeeded : 512)\r
+              ; IndexOfPdpEntries++, PageDirectoryPointerEntry++)\r
+        {\r
           //\r
           // Each Directory Pointer entries points to a page of Page Directory entires.\r
           // So allocate space for them and fill them in in the IndexOfPageDirectoryEntries loop.\r
           //\r
-          PageDirectoryEntry = (VOID *) BigPageAddress;\r
-          BigPageAddress += SIZE_4KB;\r
+          PageDirectoryEntry = (VOID *)BigPageAddress;\r
+          BigPageAddress    += SIZE_4KB;\r
 \r
           //\r
           // Fill in a Page Directory Pointer Entries\r
           //\r
-          PageDirectoryPointerEntry->Uint64 = (UINT64)(UINTN)PageDirectoryEntry | AddressEncMask;\r
+          PageDirectoryPointerEntry->Uint64         = (UINT64)(UINTN)PageDirectoryEntry | AddressEncMask;\r
           PageDirectoryPointerEntry->Bits.ReadWrite = 1;\r
-          PageDirectoryPointerEntry->Bits.Present = 1;\r
+          PageDirectoryPointerEntry->Bits.Present   = 1;\r
 \r
           for (IndexOfPageDirectoryEntries = 0; IndexOfPageDirectoryEntries < 512; IndexOfPageDirectoryEntries++, PageDirectoryEntry++, PageAddress += SIZE_2MB) {\r
-            if (ToSplitPageTable (PageAddress, SIZE_2MB, StackBase, StackSize)) {\r
+            if (ToSplitPageTable (PageAddress, SIZE_2MB, StackBase, StackSize, GhcbBase, GhcbSize)) {\r
               //\r
               // Need to split this 2M page that covers NULL or stack range.\r
               //\r
-              Split2MPageTo4K (PageAddress, (UINT64 *) PageDirectoryEntry, StackBase, StackSize);\r
+              Split2MPageTo4K (PageAddress, (UINT64 *)PageDirectoryEntry, StackBase, StackSize, GhcbBase, GhcbSize);\r
             } else {\r
               //\r
               // Fill in the Page Directory entries\r
               //\r
-              PageDirectoryEntry->Uint64 = (UINT64)PageAddress | AddressEncMask;\r
+              PageDirectoryEntry->Uint64         = (UINT64)PageAddress | AddressEncMask;\r
               PageDirectoryEntry->Bits.ReadWrite = 1;\r
-              PageDirectoryEntry->Bits.Present = 1;\r
-              PageDirectoryEntry->Bits.MustBe1 = 1;\r
+              PageDirectoryEntry->Bits.Present   = 1;\r
+              PageDirectoryEntry->Bits.MustBe1   = 1;\r
             }\r
           }\r
         }\r
@@ -855,7 +923,7 @@ CreateIdentityMappingPageTables (
         //\r
         // Fill with null entry for unused PDPTE\r
         //\r
-        ZeroMem (PageDirectoryPointerEntry, (512 - IndexOfPdpEntries) * sizeof(PAGE_MAP_AND_DIRECTORY_POINTER));\r
+        ZeroMem (PageDirectoryPointerEntry, (512 - IndexOfPdpEntries) * sizeof (PAGE_MAP_AND_DIRECTORY_POINTER));\r
       }\r
     }\r
 \r
@@ -866,7 +934,7 @@ CreateIdentityMappingPageTables (
   }\r
 \r
   if (Page5LevelSupport) {\r
-    Cr4.UintN = AsmReadCr4 ();\r
+    Cr4.UintN     = AsmReadCr4 ();\r
     Cr4.Bits.LA57 = 1;\r
     AsmWriteCr4 (Cr4.UintN);\r
     //\r
@@ -890,4 +958,3 @@ CreateIdentityMappingPageTables (
 \r
   return (UINTN)PageMap;\r
 }\r
-\r