* [PATCH v1 0/2] x86/retpoline: Clear RETPOLINE_AMD if LFENCE is not serializing
@ 2018-01-09 22:37 Tom Lendacky
2018-01-09 22:37 ` [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature Tom Lendacky
2018-01-09 22:37 ` [PATCH v1 2/2] x86/cpu/AMD: Clear RETPOLINE_AMD if LFENCE is not serializing Tom Lendacky
0 siblings, 2 replies; 9+ messages in thread
From: Tom Lendacky @ 2018-01-09 22:37 UTC (permalink / raw)
To: x86, linux-kernel
Cc: Rik van Riel, Andi Kleen, Peter Zijlstra, Linus Torvalds,
Jiri Kosina, Dan Williams, Dave Hansen, Borislav Petkov,
Andy Lutomirski, Kees Cook, Thomas Gleixner, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
The RETPOLINE_AMD feature is set by default for AMD hardware. This
feature expects LFENCE to be serializing in order to perform the proper
speculation control. If LFENCE cannot be determined to be serializing
(for example, when running under a hypervisor that does not allow writing
to the MSR that makes LFENCE serializing) the feature needs to be
disabled. The kernel will then fall back to using the generic retpoline
support.
The following patches are included in this series:
- Add a function to clear the RETPOLINE_AMD feature and update the
variable used for sysfs output.
- If LFENCE can not be determined to be serializing call the new
function to clear the RETPOLINE_AMD feature.
This patch series is based on tip:x86/pti.
---
Tom Lendacky (2):
x86/retpoline: Add a function to clear the RETPOLINE_AMD feature
x86/cpu/AMD: Clear RETPOLINE_AMD if LFENCE is not serializing
arch/x86/include/asm/nospec-branch.h | 1 +
arch/x86/kernel/cpu/amd.c | 4 ++++
arch/x86/kernel/cpu/bugs.c | 10 ++++++++++
3 files changed, 15 insertions(+)
--
Tom Lendacky
^ permalink raw reply [flat|nested] 9+ messages in thread
* [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature
2018-01-09 22:37 [PATCH v1 0/2] x86/retpoline: Clear RETPOLINE_AMD if LFENCE is not serializing Tom Lendacky
@ 2018-01-09 22:37 ` Tom Lendacky
2018-01-09 22:46 ` Thomas Gleixner
2018-01-09 22:37 ` [PATCH v1 2/2] x86/cpu/AMD: Clear RETPOLINE_AMD if LFENCE is not serializing Tom Lendacky
1 sibling, 1 reply; 9+ messages in thread
From: Tom Lendacky @ 2018-01-09 22:37 UTC (permalink / raw)
To: x86, linux-kernel
Cc: Rik van Riel, Andi Kleen, Peter Zijlstra, Linus Torvalds,
Jiri Kosina, Dan Williams, Dave Hansen, Borislav Petkov,
Andy Lutomirski, Kees Cook, Thomas Gleixner, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
For AMD hardware, the RETPOLINE_AMD feature is dependent on LFENCE being
a serializing instruction. Create a function to allow RETPOLINE_AMD to
be cleared if it cannot be determined that LFENCE is serializing. In
addition, update the spectre_v2_enabled variable so that sysfs output is
correct.
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
---
arch/x86/include/asm/nospec-branch.h | 1 +
arch/x86/kernel/cpu/bugs.c | 10 ++++++++++
2 files changed, 11 insertions(+)
diff --git a/arch/x86/include/asm/nospec-branch.h b/arch/x86/include/asm/nospec-branch.h
index 8ddf851..5785684 100644
--- a/arch/x86/include/asm/nospec-branch.h
+++ b/arch/x86/include/asm/nospec-branch.h
@@ -153,6 +153,7 @@
#endif
void spectre_v2_check_boottime_disable(void);
+void retpoline_amd_disable(void);
#endif /* __ASSEMBLY__ */
#endif /* __NOSPEC_BRANCH_H__ */
diff --git a/arch/x86/kernel/cpu/bugs.c b/arch/x86/kernel/cpu/bugs.c
index b957f77..a4c594c 100644
--- a/arch/x86/kernel/cpu/bugs.c
+++ b/arch/x86/kernel/cpu/bugs.c
@@ -170,6 +170,16 @@ void __init spectre_v2_check_boottime_disable(void)
return;
}
+void retpoline_amd_disable(void)
+{
+ if (!boot_cpu_has(X86_FEATURE_RETPOLINE_AMD))
+ return;
+
+ setup_clear_cpu_cap(X86_FEATURE_RETPOLINE_AMD);
+ spectre_v2_enabled = retp_compiler() ?
+ SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
+}
+
#ifdef CONFIG_SYSFS
ssize_t cpu_show_meltdown(struct device *dev,
struct device_attribute *attr, char *buf)
^ permalink raw reply [flat|nested] 9+ messages in thread
* [PATCH v1 2/2] x86/cpu/AMD: Clear RETPOLINE_AMD if LFENCE is not serializing
2018-01-09 22:37 [PATCH v1 0/2] x86/retpoline: Clear RETPOLINE_AMD if LFENCE is not serializing Tom Lendacky
2018-01-09 22:37 ` [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature Tom Lendacky
@ 2018-01-09 22:37 ` Tom Lendacky
1 sibling, 0 replies; 9+ messages in thread
From: Tom Lendacky @ 2018-01-09 22:37 UTC (permalink / raw)
To: x86, linux-kernel
Cc: Rik van Riel, Andi Kleen, Peter Zijlstra, Linus Torvalds,
Jiri Kosina, Dan Williams, Dave Hansen, Borislav Petkov,
Andy Lutomirski, Kees Cook, Thomas Gleixner, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
During early boot, spectre_v2_check_boottime_disable() sets the
RETPOLINE_AMD feature for AMD hardware (before init_amd() is called).
Since the RETPOLINE_AMD feature uses LFENCE to perform speculation
control, it can only be used if LFENCE is serializing. Clear the
RETPOLINE_AMD feature if the MSR write to make LFENCE serializing
is not successful.
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
---
arch/x86/kernel/cpu/amd.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/arch/x86/kernel/cpu/amd.c b/arch/x86/kernel/cpu/amd.c
index ea831c8..8a0076b 100644
--- a/arch/x86/kernel/cpu/amd.c
+++ b/arch/x86/kernel/cpu/amd.c
@@ -13,6 +13,7 @@
#include <asm/smp.h>
#include <asm/pci-direct.h>
#include <asm/delay.h>
+#include <asm/nospec-branch.h>
#ifdef CONFIG_X86_64
# include <asm/mmconfig.h>
@@ -854,6 +855,9 @@ static void init_amd(struct cpuinfo_x86 *c)
} else {
/* MFENCE stops RDTSC speculation */
set_cpu_cap(c, X86_FEATURE_MFENCE_RDTSC);
+
+ /* Don't use the LFENCE-based retpoline support */
+ retpoline_amd_disable();
}
}
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature
2018-01-09 22:37 ` [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature Tom Lendacky
@ 2018-01-09 22:46 ` Thomas Gleixner
2018-01-09 23:01 ` Tom Lendacky
0 siblings, 1 reply; 9+ messages in thread
From: Thomas Gleixner @ 2018-01-09 22:46 UTC (permalink / raw)
To: Tom Lendacky
Cc: x86, linux-kernel, Rik van Riel, Andi Kleen, Peter Zijlstra,
Linus Torvalds, Jiri Kosina, Dan Williams, Dave Hansen,
Borislav Petkov, Andy Lutomirski, Kees Cook, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
On Tue, 9 Jan 2018, Tom Lendacky wrote:
> For AMD hardware, the RETPOLINE_AMD feature is dependent on LFENCE being
> a serializing instruction. Create a function to allow RETPOLINE_AMD to
> be cleared if it cannot be determined that LFENCE is serializing. In
> addition, update the spectre_v2_enabled variable so that sysfs output is
> correct.
>
> Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
> ---
> arch/x86/include/asm/nospec-branch.h | 1 +
> arch/x86/kernel/cpu/bugs.c | 10 ++++++++++
> 2 files changed, 11 insertions(+)
>
> diff --git a/arch/x86/include/asm/nospec-branch.h b/arch/x86/include/asm/nospec-branch.h
> index 8ddf851..5785684 100644
> --- a/arch/x86/include/asm/nospec-branch.h
> +++ b/arch/x86/include/asm/nospec-branch.h
> @@ -153,6 +153,7 @@
> #endif
>
> void spectre_v2_check_boottime_disable(void);
> +void retpoline_amd_disable(void);
>
> #endif /* __ASSEMBLY__ */
> #endif /* __NOSPEC_BRANCH_H__ */
> diff --git a/arch/x86/kernel/cpu/bugs.c b/arch/x86/kernel/cpu/bugs.c
> index b957f77..a4c594c 100644
> --- a/arch/x86/kernel/cpu/bugs.c
> +++ b/arch/x86/kernel/cpu/bugs.c
> @@ -170,6 +170,16 @@ void __init spectre_v2_check_boottime_disable(void)
> return;
> }
>
> +void retpoline_amd_disable(void)
> +{
> + if (!boot_cpu_has(X86_FEATURE_RETPOLINE_AMD))
> + return;
> +
> + setup_clear_cpu_cap(X86_FEATURE_RETPOLINE_AMD);
> + spectre_v2_enabled = retp_compiler() ?
> + SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
> +}
Urgh. That's an awful hack. why not do the obvious?
Thanks,
tglx
--- a/arch/x86/kernel/cpu/bugs.c
+++ b/arch/x86/kernel/cpu/bugs.c
@@ -148,14 +148,21 @@ void __init spectre_v2_check_boottime_di
retpoline:
if (boot_cpu_data.x86_vendor == X86_VENDOR_AMD) {
retpoline_amd:
+ if (boot_cpu_data.x86_vendor != X86_VENDOR_AMD ||
+ !boot_cpu_has(X86_FEATURE_LFENCE_RDTSC)) {
+ pr_info("AMD retpoline not supported, fall back to generic\n");
+ goto retpoline_generic;
+ }
+
spectre_v2_enabled = retp_compiler() ?
SPECTRE_V2_RETPOLINE_AMD : SPECTRE_V2_RETPOLINE_MINIMAL_AMD;
setup_force_cpu_cap(X86_FEATURE_RETPOLINE_AMD);
- } else {
- retpoline_generic:
- spectre_v2_enabled = retp_compiler() ?
- SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
+ setup_force_cpu_cap(X86_FEATURE_RETPOLINE);
+ return;
}
+retpoline_generic:
+ spectre_v2_enabled = retp_compiler() ?
+ SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
setup_force_cpu_cap(X86_FEATURE_RETPOLINE);
return;
#else
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature
2018-01-09 22:46 ` Thomas Gleixner
@ 2018-01-09 23:01 ` Tom Lendacky
2018-01-09 23:09 ` Thomas Gleixner
0 siblings, 1 reply; 9+ messages in thread
From: Tom Lendacky @ 2018-01-09 23:01 UTC (permalink / raw)
To: Thomas Gleixner
Cc: x86, linux-kernel, Rik van Riel, Andi Kleen, Peter Zijlstra,
Linus Torvalds, Jiri Kosina, Dan Williams, Dave Hansen,
Borislav Petkov, Andy Lutomirski, Kees Cook, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
On 1/9/2018 4:46 PM, Thomas Gleixner wrote:
> On Tue, 9 Jan 2018, Tom Lendacky wrote:
>> For AMD hardware, the RETPOLINE_AMD feature is dependent on LFENCE being
>> a serializing instruction. Create a function to allow RETPOLINE_AMD to
>> be cleared if it cannot be determined that LFENCE is serializing. In
>> addition, update the spectre_v2_enabled variable so that sysfs output is
>> correct.
>>
>> Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
>> ---
>> arch/x86/include/asm/nospec-branch.h | 1 +
>> arch/x86/kernel/cpu/bugs.c | 10 ++++++++++
>> 2 files changed, 11 insertions(+)
>>
>> diff --git a/arch/x86/include/asm/nospec-branch.h b/arch/x86/include/asm/nospec-branch.h
>> index 8ddf851..5785684 100644
>> --- a/arch/x86/include/asm/nospec-branch.h
>> +++ b/arch/x86/include/asm/nospec-branch.h
>> @@ -153,6 +153,7 @@
>> #endif
>>
>> void spectre_v2_check_boottime_disable(void);
>> +void retpoline_amd_disable(void);
>>
>> #endif /* __ASSEMBLY__ */
>> #endif /* __NOSPEC_BRANCH_H__ */
>> diff --git a/arch/x86/kernel/cpu/bugs.c b/arch/x86/kernel/cpu/bugs.c
>> index b957f77..a4c594c 100644
>> --- a/arch/x86/kernel/cpu/bugs.c
>> +++ b/arch/x86/kernel/cpu/bugs.c
>> @@ -170,6 +170,16 @@ void __init spectre_v2_check_boottime_disable(void)
>> return;
>> }
>>
>> +void retpoline_amd_disable(void)
>> +{
>> + if (!boot_cpu_has(X86_FEATURE_RETPOLINE_AMD))
>> + return;
>> +
>> + setup_clear_cpu_cap(X86_FEATURE_RETPOLINE_AMD);
>> + spectre_v2_enabled = retp_compiler() ?
>> + SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
>> +}
>
> Urgh. That's an awful hack. why not do the obvious?
My first attempt was very similar to your change below, but testing
showed that spectre_v2_check_boottime_disable() is called before the
X86_FEATURE_LFENCE_RDTSC can be set. I can look at moving where the
X86_FEATURE_LFENCE_RDTSC is set, maybe into early_init_amd() or such
if you think that would be best.
Thanks,
Tom
>
> Thanks,
>
> tglx
>
> --- a/arch/x86/kernel/cpu/bugs.c
> +++ b/arch/x86/kernel/cpu/bugs.c
> @@ -148,14 +148,21 @@ void __init spectre_v2_check_boottime_di
> retpoline:
> if (boot_cpu_data.x86_vendor == X86_VENDOR_AMD) {
> retpoline_amd:
> + if (boot_cpu_data.x86_vendor != X86_VENDOR_AMD ||
> + !boot_cpu_has(X86_FEATURE_LFENCE_RDTSC)) {
> + pr_info("AMD retpoline not supported, fall back to generic\n");
> + goto retpoline_generic;
> + }
> +
> spectre_v2_enabled = retp_compiler() ?
> SPECTRE_V2_RETPOLINE_AMD : SPECTRE_V2_RETPOLINE_MINIMAL_AMD;
> setup_force_cpu_cap(X86_FEATURE_RETPOLINE_AMD);
> - } else {
> - retpoline_generic:
> - spectre_v2_enabled = retp_compiler() ?
> - SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
> + setup_force_cpu_cap(X86_FEATURE_RETPOLINE);
> + return;
> }
> +retpoline_generic:
> + spectre_v2_enabled = retp_compiler() ?
> + SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
> setup_force_cpu_cap(X86_FEATURE_RETPOLINE);
> return;
> #else
>
>
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature
2018-01-09 23:01 ` Tom Lendacky
@ 2018-01-09 23:09 ` Thomas Gleixner
2018-01-09 23:38 ` Tom Lendacky
0 siblings, 1 reply; 9+ messages in thread
From: Thomas Gleixner @ 2018-01-09 23:09 UTC (permalink / raw)
To: Tom Lendacky
Cc: x86, linux-kernel, Rik van Riel, Andi Kleen, Peter Zijlstra,
Linus Torvalds, Jiri Kosina, Dan Williams, Dave Hansen,
Borislav Petkov, Andy Lutomirski, Kees Cook, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
On Tue, 9 Jan 2018, Tom Lendacky wrote:
> On 1/9/2018 4:46 PM, Thomas Gleixner wrote:
> > Urgh. That's an awful hack. why not do the obvious?
>
> My first attempt was very similar to your change below, but testing
> showed that spectre_v2_check_boottime_disable() is called before the
> X86_FEATURE_LFENCE_RDTSC can be set. I can look at moving where the
> X86_FEATURE_LFENCE_RDTSC is set, maybe into early_init_amd() or such
> if you think that would be best.
Wait, we can move the selection _AFTER_ identify_boot_cpu().
Thanks,
tglx
8<----------------
--- a/arch/x86/include/asm/nospec-branch.h
+++ b/arch/x86/include/asm/nospec-branch.h
@@ -152,7 +152,5 @@
# define THUNK_TARGET(addr) [thunk_target] "rm" (addr)
#endif
-void spectre_v2_check_boottime_disable(void);
-
#endif /* __ASSEMBLY__ */
#endif /* __NOSPEC_BRANCH_H__ */
--- a/arch/x86/kernel/cpu/bugs.c
+++ b/arch/x86/kernel/cpu/bugs.c
@@ -24,6 +24,8 @@
#include <asm/pgtable.h>
#include <asm/set_memory.h>
+static void __init spectre_v2_check_boottime_disable(void);
+
void __init check_bugs(void)
{
identify_boot_cpu();
@@ -33,6 +35,9 @@ void __init check_bugs(void)
print_cpu_info(&boot_cpu_data);
}
+ /* Select the proper spectre mitigation before patching alternatives */
+ spectre_v2_check_boottime_disable();
+
#ifdef CONFIG_X86_32
/*
* Check whether we are able to run this kernel safely on SMP.
@@ -106,7 +111,7 @@ static inline bool match_option(const ch
return len == arglen && !strncmp(arg, opt, len);
}
-void __init spectre_v2_check_boottime_disable(void)
+static void __init spectre_v2_check_boottime_disable(void)
{
char arg[20];
int ret;
@@ -148,14 +153,21 @@ void __init spectre_v2_check_boottime_di
retpoline:
if (boot_cpu_data.x86_vendor == X86_VENDOR_AMD) {
retpoline_amd:
+ if (boot_cpu_data.x86_vendor != X86_VENDOR_AMD ||
+ !boot_cpu_has(X86_FEATURE_LFENCE_RDTSC)) {
+ pr_info("AMD retpoline not supported, fall back to generic\n");
+ goto retpoline_generic;
+ }
+
spectre_v2_enabled = retp_compiler() ?
SPECTRE_V2_RETPOLINE_AMD : SPECTRE_V2_RETPOLINE_MINIMAL_AMD;
setup_force_cpu_cap(X86_FEATURE_RETPOLINE_AMD);
- } else {
- retpoline_generic:
- spectre_v2_enabled = retp_compiler() ?
- SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
+ setup_force_cpu_cap(X86_FEATURE_RETPOLINE);
+ return;
}
+retpoline_generic:
+ spectre_v2_enabled = retp_compiler() ?
+ SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
setup_force_cpu_cap(X86_FEATURE_RETPOLINE);
return;
#else
--- a/arch/x86/kernel/setup.c
+++ b/arch/x86/kernel/setup.c
@@ -1322,8 +1322,6 @@ void __init setup_arch(char **cmdline_p)
register_refined_jiffies(CLOCK_TICK_RATE);
- spectre_v2_check_boottime_disable();
-
#ifdef CONFIG_EFI
if (efi_enabled(EFI_BOOT))
efi_apply_memmap_quirks();
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature
2018-01-09 23:09 ` Thomas Gleixner
@ 2018-01-09 23:38 ` Tom Lendacky
2018-01-09 23:43 ` Thomas Gleixner
0 siblings, 1 reply; 9+ messages in thread
From: Tom Lendacky @ 2018-01-09 23:38 UTC (permalink / raw)
To: Thomas Gleixner
Cc: x86, linux-kernel, Rik van Riel, Andi Kleen, Peter Zijlstra,
Linus Torvalds, Jiri Kosina, Dan Williams, Dave Hansen,
Borislav Petkov, Andy Lutomirski, Kees Cook, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
On 1/9/2018 5:09 PM, Thomas Gleixner wrote:
> On Tue, 9 Jan 2018, Tom Lendacky wrote:
>> On 1/9/2018 4:46 PM, Thomas Gleixner wrote:
>>> Urgh. That's an awful hack. why not do the obvious?
>>
>> My first attempt was very similar to your change below, but testing
>> showed that spectre_v2_check_boottime_disable() is called before the
>> X86_FEATURE_LFENCE_RDTSC can be set. I can look at moving where the
>> X86_FEATURE_LFENCE_RDTSC is set, maybe into early_init_amd() or such
>> if you think that would be best.
>
> Wait, we can move the selection _AFTER_ identify_boot_cpu().
Much cleaner. Since it's just a single patch now, do you want me to
re-submit this after I test it or will you just pick this up as is?
I did notice that the patch does change the behavior associated with
the command line options, though. Not sure if that was intentional.
Thanks,
Tom
>
> Thanks,
>
> tglx
>
> 8<----------------
>
> --- a/arch/x86/include/asm/nospec-branch.h
> +++ b/arch/x86/include/asm/nospec-branch.h
> @@ -152,7 +152,5 @@
> # define THUNK_TARGET(addr) [thunk_target] "rm" (addr)
> #endif
>
> -void spectre_v2_check_boottime_disable(void);
> -
> #endif /* __ASSEMBLY__ */
> #endif /* __NOSPEC_BRANCH_H__ */
> --- a/arch/x86/kernel/cpu/bugs.c
> +++ b/arch/x86/kernel/cpu/bugs.c
> @@ -24,6 +24,8 @@
> #include <asm/pgtable.h>
> #include <asm/set_memory.h>
>
> +static void __init spectre_v2_check_boottime_disable(void);
> +
> void __init check_bugs(void)
> {
> identify_boot_cpu();
> @@ -33,6 +35,9 @@ void __init check_bugs(void)
> print_cpu_info(&boot_cpu_data);
> }
>
> + /* Select the proper spectre mitigation before patching alternatives */
> + spectre_v2_check_boottime_disable();
> +
> #ifdef CONFIG_X86_32
> /*
> * Check whether we are able to run this kernel safely on SMP.
> @@ -106,7 +111,7 @@ static inline bool match_option(const ch
> return len == arglen && !strncmp(arg, opt, len);
> }
>
> -void __init spectre_v2_check_boottime_disable(void)
> +static void __init spectre_v2_check_boottime_disable(void)
> {
> char arg[20];
> int ret;
> @@ -148,14 +153,21 @@ void __init spectre_v2_check_boottime_di
> retpoline:
> if (boot_cpu_data.x86_vendor == X86_VENDOR_AMD) {
> retpoline_amd:
> + if (boot_cpu_data.x86_vendor != X86_VENDOR_AMD ||
> + !boot_cpu_has(X86_FEATURE_LFENCE_RDTSC)) {
> + pr_info("AMD retpoline not supported, fall back to generic\n");
> + goto retpoline_generic;
> + }
> +
> spectre_v2_enabled = retp_compiler() ?
> SPECTRE_V2_RETPOLINE_AMD : SPECTRE_V2_RETPOLINE_MINIMAL_AMD;
> setup_force_cpu_cap(X86_FEATURE_RETPOLINE_AMD);
> - } else {
> - retpoline_generic:
> - spectre_v2_enabled = retp_compiler() ?
> - SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
> + setup_force_cpu_cap(X86_FEATURE_RETPOLINE);
> + return;
> }
> +retpoline_generic:
> + spectre_v2_enabled = retp_compiler() ?
> + SPECTRE_V2_RETPOLINE_GENERIC : SPECTRE_V2_RETPOLINE_MINIMAL;
> setup_force_cpu_cap(X86_FEATURE_RETPOLINE);
> return;
> #else
> --- a/arch/x86/kernel/setup.c
> +++ b/arch/x86/kernel/setup.c
> @@ -1322,8 +1322,6 @@ void __init setup_arch(char **cmdline_p)
>
> register_refined_jiffies(CLOCK_TICK_RATE);
>
> - spectre_v2_check_boottime_disable();
> -
> #ifdef CONFIG_EFI
> if (efi_enabled(EFI_BOOT))
> efi_apply_memmap_quirks();
>
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature
2018-01-09 23:38 ` Tom Lendacky
@ 2018-01-09 23:43 ` Thomas Gleixner
2018-01-10 0:22 ` Tom Lendacky
0 siblings, 1 reply; 9+ messages in thread
From: Thomas Gleixner @ 2018-01-09 23:43 UTC (permalink / raw)
To: Tom Lendacky
Cc: x86, linux-kernel, Rik van Riel, Andi Kleen, Peter Zijlstra,
Linus Torvalds, Jiri Kosina, Dan Williams, Dave Hansen,
Borislav Petkov, Andy Lutomirski, Kees Cook, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
On Tue, 9 Jan 2018, Tom Lendacky wrote:
> On 1/9/2018 5:09 PM, Thomas Gleixner wrote:
> > On Tue, 9 Jan 2018, Tom Lendacky wrote:
> >> On 1/9/2018 4:46 PM, Thomas Gleixner wrote:
> >>> Urgh. That's an awful hack. why not do the obvious?
> >>
> >> My first attempt was very similar to your change below, but testing
> >> showed that spectre_v2_check_boottime_disable() is called before the
> >> X86_FEATURE_LFENCE_RDTSC can be set. I can look at moving where the
> >> X86_FEATURE_LFENCE_RDTSC is set, maybe into early_init_amd() or such
> >> if you think that would be best.
> >
> > Wait, we can move the selection _AFTER_ identify_boot_cpu().
>
> Much cleaner. Since it's just a single patch now, do you want me to
> re-submit this after I test it or will you just pick this up as is?
>
> I did notice that the patch does change the behavior associated with
> the command line options, though. Not sure if that was intentional.
Yes. I noticed while looking at your issue that when AMD is selected on the
command line then we have no support at all on intel. So I prefer to err
out and enable the generic version.
If you can just polish it up with a changelog and resubmit after testing
that would be appreciated as I'm steam blasting the IBRS stuff at the
moment.
Thanks,
tglx
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature
2018-01-09 23:43 ` Thomas Gleixner
@ 2018-01-10 0:22 ` Tom Lendacky
0 siblings, 0 replies; 9+ messages in thread
From: Tom Lendacky @ 2018-01-10 0:22 UTC (permalink / raw)
To: Thomas Gleixner
Cc: x86, linux-kernel, Rik van Riel, Andi Kleen, Peter Zijlstra,
Linus Torvalds, Jiri Kosina, Dan Williams, Dave Hansen,
Borislav Petkov, Andy Lutomirski, Kees Cook, Tim Chen,
Greg Kroah-Hartman, David Woodhouse, Paul Turner
On 1/9/2018 5:43 PM, Thomas Gleixner wrote:
> On Tue, 9 Jan 2018, Tom Lendacky wrote:
>> On 1/9/2018 5:09 PM, Thomas Gleixner wrote:
>>> On Tue, 9 Jan 2018, Tom Lendacky wrote:
>>>> On 1/9/2018 4:46 PM, Thomas Gleixner wrote:
>>>>> Urgh. That's an awful hack. why not do the obvious?
>>>>
>>>> My first attempt was very similar to your change below, but testing
>>>> showed that spectre_v2_check_boottime_disable() is called before the
>>>> X86_FEATURE_LFENCE_RDTSC can be set. I can look at moving where the
>>>> X86_FEATURE_LFENCE_RDTSC is set, maybe into early_init_amd() or such
>>>> if you think that would be best.
>>>
>>> Wait, we can move the selection _AFTER_ identify_boot_cpu().
>>
>> Much cleaner. Since it's just a single patch now, do you want me to
>> re-submit this after I test it or will you just pick this up as is?
>>
>> I did notice that the patch does change the behavior associated with
>> the command line options, though. Not sure if that was intentional.
>
> Yes. I noticed while looking at your issue that when AMD is selected on the
> command line then we have no support at all on intel. So I prefer to err
> out and enable the generic version.
>
> If you can just polish it up with a changelog and resubmit after testing
> that would be appreciated as I'm steam blasting the IBRS stuff at the
> moment.
Will do. I'll add your Signed-off-by when I submit it.
Thanks,
Tom
>
> Thanks,
>
> tglx
>
^ permalink raw reply [flat|nested] 9+ messages in thread
end of thread, other threads:[~2018-01-10 0:22 UTC | newest]
Thread overview: 9+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-01-09 22:37 [PATCH v1 0/2] x86/retpoline: Clear RETPOLINE_AMD if LFENCE is not serializing Tom Lendacky
2018-01-09 22:37 ` [PATCH v1 1/2] x86/retpoline: Add a function to clear the RETPOLINE_AMD feature Tom Lendacky
2018-01-09 22:46 ` Thomas Gleixner
2018-01-09 23:01 ` Tom Lendacky
2018-01-09 23:09 ` Thomas Gleixner
2018-01-09 23:38 ` Tom Lendacky
2018-01-09 23:43 ` Thomas Gleixner
2018-01-10 0:22 ` Tom Lendacky
2018-01-09 22:37 ` [PATCH v1 2/2] x86/cpu/AMD: Clear RETPOLINE_AMD if LFENCE is not serializing Tom Lendacky
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®