]> git.proxmox.com Git - mirror_edk2.git/commit - OvmfPkg/Include/Library/MemEncryptSevLib.h
OvmfPkg/VmgExitLib: Support nested #VCs
authorTom Lendacky <thomas.lendacky@amd.com>
Thu, 7 Jan 2021 18:48:23 +0000 (12:48 -0600)
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Thu, 7 Jan 2021 19:34:39 +0000 (19:34 +0000)
commit5667dc43d82396589d2fabd790e7f6a214386969
treeddf0d66ff4e0d7e5f9a456018fca515c358884e6
parentc330af0246ac9b1c37d17fc79881fc2dd96ec80c
OvmfPkg/VmgExitLib: Support nested #VCs

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3108

In order to be able to issue messages or make interface calls that cause
another #VC (e.g. GetLocalApicBaseAddress () issues RDMSR), add support
for nested #VCs.

In order to support nested #VCs, GHCB backup pages are required. If a #VC
is received while currently processing a #VC, a backup of the current GHCB
content is made. This allows the #VC handler to continue processing the
new #VC. Upon completion of the new #VC, the GHCB is restored from the
backup page. The #VC recursion level is tracked in the per-vCPU variable
area.

Support is added to handle up to one nested #VC (or two #VCs total). If
a second nested #VC is encountered, an ASSERT will be issued and the vCPU
will enter CpuDeadLoop ().

For SEC, the GHCB backup pages are reserved in the OvmfPkgX64.fdf memory
layout, with two new fixed PCDs to provide the address and size of the
backup area.

For PEI/DXE, the GHCB backup pages are allocated as boot services pages
using the memory allocation library.

Cc: Jordan Justen <jordan.l.justen@intel.com>
Cc: Laszlo Ersek <lersek@redhat.com>
Cc: Ard Biesheuvel <ard.biesheuvel@arm.com>
Cc: Brijesh Singh <brijesh.singh@amd.com>
Acked-by: Laszlo Ersek <lersek@redhat.com>
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Message-Id: <ac2e8203fc41a351b43f60d68bdad6b57c4fb106.1610045305.git.thomas.lendacky@amd.com>
13 files changed:
OvmfPkg/AmdSev/AmdSevX64.dsc
OvmfPkg/AmdSev/AmdSevX64.fdf
OvmfPkg/Include/Library/MemEncryptSevLib.h
OvmfPkg/Library/VmgExitLib/PeiDxeVmgExitVcHandler.c [new file with mode: 0644]
OvmfPkg/Library/VmgExitLib/SecVmgExitLib.inf [new file with mode: 0644]
OvmfPkg/Library/VmgExitLib/SecVmgExitVcHandler.c [new file with mode: 0644]
OvmfPkg/Library/VmgExitLib/VmgExitLib.inf
OvmfPkg/Library/VmgExitLib/VmgExitVcHandler.c
OvmfPkg/Library/VmgExitLib/VmgExitVcHandler.h [new file with mode: 0644]
OvmfPkg/OvmfPkg.dec
OvmfPkg/OvmfPkgX64.dsc
OvmfPkg/OvmfPkgX64.fdf
OvmfPkg/PlatformPei/AmdSev.c