Skip to content

x86/microcode/AMD: Improve container verification

Borislav Petkov lkml 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest16 patches 1 replyIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/16x86/microcode/AMD: Subtract SECTION_HDR_SIZE from file leftover lengtharch/x86/kernel/cpu/microcode/amd.c+12 -30 replies
2/16x86/microcode/AMD: Add microcode container verificationarch/x86/kernel/cpu/microcode/amd.c+101 -00 replies
3/16x86/microcode/AMD: Move verify_patch_size() up in the filearch/x86/kernel/cpu/microcode/amd.c+41 -410 replies
4/16x86/microcode/AMD: Clean up per-family patch size checksarch/x86/kernel/cpu/microcode/amd.c+8 -130 replies
5/16x86/microcode/AMD: Cleanup verify_patch_size() morearch/x86/kernel/cpu/microcode/amd.c+14 -120 replies
6/16x86/microcode/AMD: Concentrate patch verificationarch/x86/kernel/cpu/microcode/amd.c+54 -250 replies
7/16x86/microcode/AMD: Simplify patch family detectionarch/x86/kernel/cpu/microcode/amd.c+3 -240 replies
8/16x86/microcode/AMD: Move patch family check to verify_patch()arch/x86/kernel/cpu/microcode/amd.c+10 -50 replies
9/16x86/microcode/AMD: Move chipset-specific check into verify_patch()arch/x86/kernel/cpu/microcode/amd.c+6 -60 replies
10/16x86/microcode/AMD: Change verify_patch()'s return valuearch/x86/kernel/cpu/microcode/amd.c+52 -390 replies
11/16x86/microcode/AMD: Convert early parser to the new verification routinesarch/x86/kernel/cpu/microcode/amd.c+24 -220 replies
12/16x86/microcode/AMD: Fix container size's typearch/x86/kernel/cpu/microcode/amd.c+11 -100 replies
13/16x86/microcode/AMD: Check microcode container data in the late loaderarch/x86/kernel/cpu/microcode/amd.c+17 -210 replies
14/16x86/microcode/AMD: Convert CPU equivalence table variable into a structarch/x86/kernel/cpu/microcode/amd.c+18 -140 replies
15/16x86/microcode/AMD: Check the equivalence table size when scanning itarch/x86/kernel/cpu/microcode/amd.c+15 -60 replies
16/16x86/microcode/AMD: Update copyrightarch/x86/kernel/cpu/microcode/amd.c+1 -10 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 00/16] x86/microcode/AMD: Improve container verification

From: Borislav Petkov <[email protected]>

Hi all,

this is work which got started by Maciej a while ago. I have finally had the time to redo all the ideas properly, split it in self-contained, logical chunks and test it.

Reveiew and comments are appreciated.

Thx.

Borislav Petkov (11):
x86/microcode/AMD: Move verify_patch_size() up in the file x86/microcode/AMD: Clean up per-family patch size checks x86/microcode/AMD: Cleanup verify_patch_size() more x86/microcode/AMD: Concentrate patch verification x86/microcode/AMD: Simplify patch family detection x86/microcode/AMD: Move patch family check to verify_patch() x86/microcode/AMD: Move chipset-specific check into verify_patch() x86/microcode/AMD: Change verify_patch()'s return value x86/microcode/AMD: Convert early parser to the new verification routines x86/microcode/AMD: Fix container size's type x86/microcode/AMD: Update copyright

Maciej S. Szmigiero (5):
x86/microcode/AMD: Subtract SECTION_HDR_SIZE from file leftover length x86/microcode/AMD: Add microcode container verification x86/microcode/AMD: Check microcode container data in the late loader x86/microcode/AMD: Convert CPU equivalence table variable into a struct x86/microcode/AMD: Check the equivalence table size when scanning it

 arch/x86/kernel/cpu/microcode/amd.c | 469 ++++++++++++++++++----------
 1 file changed, 307 insertions(+), 162 deletions(-)
Signature · 1 line
2.19.1

Read the cover letter in its thread