Messages in this thread | | | Date | Tue, 20 Oct 2020 11:41:10 +0200 | From | Joerg Roedel <> | Subject | Re: [PATCH 3/5] x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path |
| |
On Mon, Oct 19, 2020 at 05:22:47PM -0400, Arvind Sankar wrote: > The boot cpu also enables CR4.PGE -- that code is shared between boot > and secondary cpus. The boot cpu jumps to the first "1" label below, > just before the call to sev_verify_cbit you're adding.
You are right, in the real kernel image PGE gets enabled early. I added code to save and restore CR4 in sev_verify_cbit() and disable PGE during the test.
Thanks,
Joerg
| |