[lkml]   [2018]   [Jan]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Improve retpoline for Skylake
On Mon, 2018-01-15 at 10:06 -0800, Andy Lutomirski wrote:
> > Refill or not, you are aware that a correctly timed SMI in a leaf
> > function will cause the next ret to speculate into userspace, because
> > there is guaranteed peturbance in the RSB?  (On the expectation that the
> > SMM handler isn't entirely devoid of function calls).
> Couldn't firmware fill the RSB with a some known safe address, maybe
> even 0, and then immediately do RSM?

Why don't we just unconditionally declare that *all* firmware that uses
SMI for anything at all is broken?

[unhandled content-type:application/x-pkcs7-signature]
 \ /
  Last update: 2018-01-15 19:09    [W:0.091 / U:0.760 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site