arm-trusted-firmware

History

Anthony Steinhauser f461fe346b Prevent speculative execution past ERET Even though ERET always causes a jump to another address, aarch64 CPUs speculatively execute following instructions as if the ERET instruction was not a jump instruction. The speculative execution does not cross privilege-levels (to the jump target as one would expect), but it continues on the kernel privilege level as if the ERET instruction did not change the control flow - thus execution anything that is accidentally linked after the ERET instruction. Later, the results of this speculative execution are always architecturally discarded, however they can leak data using microarchitectural side channels. This speculative execution is very reliable (seems to be unconditional) and it manages to complete even relatively performance-heavy operations (e.g. multiple dependent fetches from uncached memory). This was fixed in Linux, FreeBSD, OpenBSD and Optee OS: `679db70801` `29fb48ace4` `3a08873ece` `abfd092aa1` It is demonstrated in a SafeSide example: https://github.com/google/safeside/blob/master/demos/eret_hvc_smc_wrapper.cc https://github.com/google/safeside/blob/master/kernel_modules/kmod_eret_hvc_smc/eret_hvc_smc_module.c Signed-off-by: Anthony Steinhauser <asteinhauser@google.com> Change-Id: Iead39b0b9fb4b8d8b5609daaa8be81497ba63a0f		5 years ago
..
aarch64	Prevent speculative execution past ERET	5 years ago
include	rcar_get3: drivers: ddr: Partly unify register macros between DDR A and B	5 years ago
bl2_cpg_init.c	rcar_gen3: plat: Rename RCAR_PRODUCT_* to PRR_PRODUCT_*	5 years ago
bl2_interrupt_error.c	rcar_gen3: plat: Dump EL3 interrupt error registers	6 years ago
bl2_plat_mem_params_desc.c	rcar_gen3: plat: Pass DT to OpTee OS	5 years ago
bl2_plat_setup.c	rcar_gen3: Add missing #{address,size}-cells into generated DT	5 years ago
bl2_secure_setting.c	rcar_gen3: plat: Add initial D3 support	6 years ago
bl31_plat_setup.c	rcar_gen3: plat: Rename RCAR_PRODUCT_* to PRR_PRODUCT_*	5 years ago
plat_image_load.c	Sanitise includes across codebase	6 years ago
plat_pm.c	rcar_gen3: drivers: Change to restore timer counter value at resume	6 years ago
plat_storage.c	Sanitise includes across codebase	6 years ago
plat_topology.c	Sanitise includes across codebase	6 years ago
platform.mk	rcar_gen3: drivers: ddr: Move DDR drivers out of staging	5 years ago
rcar_common.c	Update renesas platform to not rely on undefined overflow behaviour	5 years ago