KVM: SVM: move more vmentry code to assembly

Browse source

Manipulate IF around vmload/vmsave to remove the confusing usage of
local_irq_enable where interrupts are actually disabled via GIF.
And stuff the RSB immediately without waiting for a RET to avoid
Spectre-v2 attacks.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Paolo Bonzini 2020-04-13 03:17:58 -04:00

parent 9ef1530c0c

commit f14eec0a32

3 changed files with 9 additions and 28 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

21

arch/x86/include/asm/nospec-branch.h

View file

7

arch/x86/kvm/svm/svm.c

View file

9

arch/x86/kvm/svm/vmenter.S

View file