[v2] xen/nospec: Add Kconfig options for speculative hardening

[Xen-devel] [PATCH for-4.13 v2 0/2] xen/nospec: Add Kconfig options for speculative hardening

Andrew Cooper posted 2 patches 6 years, 1 month ago

Diff against v1
Download series mbox

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/xen tags/patchew/20191001143207.15844-1-andrew.cooper3@citrix.com

docs/misc/xen-command-line.pandoc |  8 +------
xen/arch/x86/spec_ctrl.c          | 17 ++-------------
xen/common/Kconfig                | 45 +++++++++++++++++++++++++++++++++++++++
xen/include/asm-x86/cpufeatures.h |  2 +-
xen/include/asm-x86/nospec.h      |  6 +++---
xen/include/asm-x86/spec_ctrl.h   |  1 -
xen/include/xen/nospec.h          |  5 +++++
7 files changed, 57 insertions(+), 27 deletions(-)

Expand all Fold all

[Xen-devel] [PATCH for-4.13 v2 0/2] xen/nospec: Add Kconfig options for speculative hardening

Posted by Andrew Cooper 6 years, 1 month ago

The main purpose is patch 2.  The "l1tf-barrier" work currently causes a perf
hit and gains no safety, and is therefore unfit for inclusion into Xen 4.13 at
this time.

See individual patches for changes from v1.

Andrew Cooper (2):
  xen/nospec: Introduce CONFIG_SPECULATIVE_HARDEN_ARRAY
  xen/nospec: Introduce CONFIG_SPECULATIVE_HARDEN_BRANCH and disable it

 docs/misc/xen-command-line.pandoc |  8 +------
 xen/arch/x86/spec_ctrl.c          | 17 ++-------------
 xen/common/Kconfig                | 45 +++++++++++++++++++++++++++++++++++++++
 xen/include/asm-x86/cpufeatures.h |  2 +-
 xen/include/asm-x86/nospec.h      |  6 +++---
 xen/include/asm-x86/spec_ctrl.h   |  1 -
 xen/include/xen/nospec.h          |  5 +++++
 7 files changed, 57 insertions(+), 27 deletions(-)

-- 
2.11.0


_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel