UefiCpuPkg/CpuMpPei: Add GDT migration support (CVE-2019-11098)

[mirror_edk2.git] / UefiCpuPkg / CpuMpPei / CpuPaging.c

diff --git a/UefiCpuPkg/CpuMpPei/CpuPaging.c b/UefiCpuPkg/CpuMpPei/CpuPaging.c
index a462e7ee1e386b60cbd4074b671f007eee65a97e..3bf0574b34c6cbe342573d633977a7d39403f265 100644 (file)
--- a/UefiCpuPkg/CpuMpPei/CpuPaging.c
+++ b/UefiCpuPkg/CpuMpPei/CpuPaging.c
@@ -602,8 +602,16 @@ MemoryDiscoveredPpiNotifyCallback (
   IN VOID                       *Ppi\r
   )\r
 {\r
-  EFI_STATUS      Status;\r
-  BOOLEAN         InitStackGuard;\r
+  EFI_STATUS  Status;\r
+  BOOLEAN     InitStackGuard;\r
+  BOOLEAN     InterruptState;\r
+\r
+  if (PcdGetBool (PcdMigrateTemporaryRamFirmwareVolumes)) {\r
+    InterruptState = SaveAndDisableInterrupts ();\r
+    Status = MigrateGdt ();\r
+    ASSERT_EFI_ERROR (Status);\r
+    SetInterruptState (InterruptState);\r
+  }\r
 \r
   //\r
   // Paging must be setup first. Otherwise the exception TSS setup during MP\r