Home
last modified time | relevance | path

Searched hist:ea6020830c8f88e2b844ae9700c8ef58fbb51c75 (Results 1 – 6 of 6) sorted by relevance

/freebsd/sys/x86/include/
H A Dx86_var.hdiff ea6020830c8f88e2b844ae9700c8ef58fbb51c75 Thu May 21 00:00:31 CEST 2020 Konstantin Belousov <kib@FreeBSD.org> amd64: Add a knob to flush RSB on context switches if machine has SMEP.

The flush is needed to prevent cross-process ret2spec, which is not handled
on kernel entry if IBPB is enabled but SMEP is present.
While there, add i386 RSB flush.

Reported by: Anthony Steinhauser <asteinhauser@google.com>
Reviewed by: markj, Anthony Steinhauser
Discussed with: philip
admbugs: 961
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
/freebsd/share/man/man7/
H A Dsecurity.7diff ea6020830c8f88e2b844ae9700c8ef58fbb51c75 Thu May 21 00:00:31 CEST 2020 Konstantin Belousov <kib@FreeBSD.org> amd64: Add a knob to flush RSB on context switches if machine has SMEP.

The flush is needed to prevent cross-process ret2spec, which is not handled
on kernel entry if IBPB is enabled but SMEP is present.
While there, add i386 RSB flush.

Reported by: Anthony Steinhauser <asteinhauser@google.com>
Reviewed by: markj, Anthony Steinhauser
Discussed with: philip
admbugs: 961
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
/freebsd/sys/x86/x86/
H A Dcpu_machdep.cdiff ea6020830c8f88e2b844ae9700c8ef58fbb51c75 Thu May 21 00:00:31 CEST 2020 Konstantin Belousov <kib@FreeBSD.org> amd64: Add a knob to flush RSB on context switches if machine has SMEP.

The flush is needed to prevent cross-process ret2spec, which is not handled
on kernel entry if IBPB is enabled but SMEP is present.
While there, add i386 RSB flush.

Reported by: Anthony Steinhauser <asteinhauser@google.com>
Reviewed by: markj, Anthony Steinhauser
Discussed with: philip
admbugs: 961
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
/freebsd/sys/amd64/amd64/
H A Dinitcpu.cdiff ea6020830c8f88e2b844ae9700c8ef58fbb51c75 Thu May 21 00:00:31 CEST 2020 Konstantin Belousov <kib@FreeBSD.org> amd64: Add a knob to flush RSB on context switches if machine has SMEP.

The flush is needed to prevent cross-process ret2spec, which is not handled
on kernel entry if IBPB is enabled but SMEP is present.
While there, add i386 RSB flush.

Reported by: Anthony Steinhauser <asteinhauser@google.com>
Reviewed by: markj, Anthony Steinhauser
Discussed with: philip
admbugs: 961
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
H A Dsupport.Sdiff ea6020830c8f88e2b844ae9700c8ef58fbb51c75 Thu May 21 00:00:31 CEST 2020 Konstantin Belousov <kib@FreeBSD.org> amd64: Add a knob to flush RSB on context switches if machine has SMEP.

The flush is needed to prevent cross-process ret2spec, which is not handled
on kernel entry if IBPB is enabled but SMEP is present.
While there, add i386 RSB flush.

Reported by: Anthony Steinhauser <asteinhauser@google.com>
Reviewed by: markj, Anthony Steinhauser
Discussed with: philip
admbugs: 961
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
H A Dcpu_switch.Sdiff ea6020830c8f88e2b844ae9700c8ef58fbb51c75 Thu May 21 00:00:31 CEST 2020 Konstantin Belousov <kib@FreeBSD.org> amd64: Add a knob to flush RSB on context switches if machine has SMEP.

The flush is needed to prevent cross-process ret2spec, which is not handled
on kernel entry if IBPB is enabled but SMEP is present.
While there, add i386 RSB flush.

Reported by: Anthony Steinhauser <asteinhauser@google.com>
Reviewed by: markj, Anthony Steinhauser
Discussed with: philip
admbugs: 961
Sponsored by: The FreeBSD Foundation
MFC after: 1 week