FreeBSD Bugzilla – Attachment 187571 Details for
Bug 218662
bhyve exposes CPU feature SDBG to guests, causing guest panic on OpenBSD 6.1
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
VMM patch (from HardenedBSD)
e76fcb77ba82649bc6aed808af06d6d2184847d8.patch (text/plain), 941 bytes, created by
Brandon Bergren
on 2017-10-29 21:45:28 UTC
(
hide
)
Description:
VMM patch (from HardenedBSD)
Filename:
MIME Type:
Creator:
Brandon Bergren
Created:
2017-10-29 21:45:28 UTC
Size:
941 bytes
patch
obsolete
>From e76fcb77ba82649bc6aed808af06d6d2184847d8 Mon Sep 17 00:00:00 2001 >From: Oliver Pinter <oliver.pinter@hardenedbsd.org> >Date: Wed, 25 Jan 2017 20:43:59 +0100 >Subject: [PATCH] HBSD: hide the Silicon Debug CPU capability from bhyve VMM > >There is no place for a strongly hardware related and risky feature >in bhyve's vmm, so filter out this capability. > >MFC-to: 10-STABLE 11-STABLE >Signed-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org> >--- > sys/amd64/vmm/x86.c | 5 +++++ > 1 file changed, 5 insertions(+) > >diff --git a/sys/amd64/vmm/x86.c b/sys/amd64/vmm/x86.c >index 525e1d9b912f9..ea2ee1876df78 100644 >--- a/sys/amd64/vmm/x86.c >+++ b/sys/amd64/vmm/x86.c >@@ -283,6 +283,11 @@ x86_emulate_cpuid(struct vm *vm, int vcpu_id, > regs[2] &= ~CPUID2_TSCDLT; > > /* >+ * Hide the Silicon Debug functionality. >+ */ >+ regs[2] &= ~(CPUID2_SDBG); >+ >+ /* > * Hide thermal monitoring > */ > regs[3] &= ~(CPUID_ACPI | CPUID_TM);
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=187571">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 218662
: 187571