UefiCpuPkg/PiSmmCpuDxeSmm: Add support for PCD PcdPteMemoryEncryptionAddressOrMask
This PCD holds the address mask for page table entries when memory encryption is enabled on AMD processors supporting the Secure Encrypted Virtualization (SEV) feature. The mask is applied when page tables entriees are created or modified. CC: Jeff Fan <jeff.fan@intel.com> Cc: Feng Tian <feng.tian@intel.com> Cc: Star Zeng <star.zeng@intel.com> Cc: Laszlo Ersek <lersek@redhat.com> Cc: Brijesh Singh <brijesh.singh@amd.com> Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Leo Duran <leo.duran@amd.com> Reviewed-by: Jeff Fan <jeff.fan@intel.com>
This commit is contained in:
14
UefiCpuPkg/PiSmmCpuDxeSmm/PiSmmCpuDxeSmm.c
Normal file → Executable file
14
UefiCpuPkg/PiSmmCpuDxeSmm/PiSmmCpuDxeSmm.c
Normal file → Executable file
@@ -2,6 +2,8 @@
|
||||
Agent Module to load other modules to deploy SMM Entry Vector for X86 CPU.
|
||||
|
||||
Copyright (c) 2009 - 2016, Intel Corporation. All rights reserved.<BR>
|
||||
Copyright (c) 2017, AMD Incorporated. All rights reserved.<BR>
|
||||
|
||||
This program and the accompanying materials
|
||||
are licensed and made available under the terms and conditions of the BSD License
|
||||
which accompanies this distribution. The full text of the license may be found at
|
||||
@@ -96,6 +98,11 @@ BOOLEAN mSmmReadyToLock = FALSE;
|
||||
//
|
||||
BOOLEAN mSmmCodeAccessCheckEnable = FALSE;
|
||||
|
||||
//
|
||||
// Global copy of the PcdPteMemoryEncryptionAddressOrMask
|
||||
//
|
||||
UINT64 mAddressEncMask = 0;
|
||||
|
||||
//
|
||||
// Spin lock used to serialize setting of SMM Code Access Check feature
|
||||
//
|
||||
@@ -604,6 +611,13 @@ PiCpuSmmEntry (
|
||||
mSmmCodeAccessCheckEnable = PcdGetBool (PcdCpuSmmCodeAccessCheckEnable);
|
||||
DEBUG ((EFI_D_INFO, "PcdCpuSmmCodeAccessCheckEnable = %d\n", mSmmCodeAccessCheckEnable));
|
||||
|
||||
//
|
||||
// Save the PcdPteMemoryEncryptionAddressOrMask value into a global variable.
|
||||
// Make sure AddressEncMask is contained to smallest supported address field.
|
||||
//
|
||||
mAddressEncMask = PcdGet64 (PcdPteMemoryEncryptionAddressOrMask) & PAGING_1G_ADDRESS_MASK_64;
|
||||
DEBUG ((EFI_D_INFO, "mAddressEncMask = 0x%lx\n", mAddressEncMask));
|
||||
|
||||
//
|
||||
// If support CPU hot plug, we need to allocate resources for possibly hot-added processors
|
||||
//
|
||||
|
Reference in New Issue
Block a user