Ard Biesheuvel 046545314c x86/boot: Move mem_encrypt= parsing to the decompressor ... commit cd0d9d92c8 upstream. The early SME/SEV code parses the command line very early, in order to decide whether or not memory encryption should be enabled, which needs to occur even before the initial page tables are created. This is problematic for a number of reasons: - this early code runs from the 1:1 mapping provided by the decompressor or firmware, which uses a different translation than the one assumed by the linker, and so the code needs to be built in a special way; - parsing external input while the entire kernel image is still mapped writable is a bad idea in general, and really does not belong in security minded code; - the current code ignores the built-in command line entirely (although this appears to be the case for the entire decompressor) Given that the decompressor/EFI stub is an intrinsic part of the x86 bootable kernel image, move the command line parsing there and out of the core kernel. This removes the need to build lib/cmdline.o in a special way, or to use RIP-relative LEA instructions in inline asm blocks. This involves a new xloadflag in the setup header to indicate that mem_encrypt=on appeared on the kernel command line. Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Tested-by: Tom Lendacky <thomas.lendacky@amd.com> Link: https://lore.kernel.org/r/20240227151907.387873-17-ardb+git@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-04-10 16:36:07 +02:00
..
accel	accel/ivpu: Don't enable any tiles by default on VPU40xx	2024-03-01 13:35:01 +01:00
accessibility	speakup: Fix 8bit characters from direct synth	2024-04-03 15:28:28 +02:00
acpi	ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()	2024-04-10 16:35:42 +02:00
amba	…
android	binder: signal epoll threads of self-work	2024-02-23 09:25:04 +01:00
ata	ata: sata_mv: Fix PCI device ID table declaration compilation warning	2024-04-10 16:36:01 +02:00
atm	atm: idt77252: fix a memleak in open_card_ubr0	2024-02-16 19:10:49 +01:00
auxdisplay	…
base	driver core: Introduce device_link_wait_removal()	2024-04-10 16:36:03 +02:00
bcma	…
block	aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts	2024-03-26 18:19:19 -04:00
bluetooth	Bluetooth: qca: fix device-address endianness	2024-04-10 16:35:48 +02:00
bus	bus: mhi: ep: check the correct variable in mhi_ep_register_controller()	2024-03-26 18:20:06 -04:00
cache	cache: ax45mp_cache: Align end size to cache boundary in ax45mp_dma_cache_wback()	2024-03-01 13:35:08 +01:00
cdrom	…
cdx	…
char	tpm,tpm_tis: Avoid warning splat at shutdown	2024-04-03 15:28:31 +02:00
clk	clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays	2024-04-03 15:28:23 +02:00
clocksource	clocksource/drivers/arm_global_timer: Fix maximum prescaler value	2024-04-03 15:28:50 +02:00
comedi	comedi: comedi_test: Prevent timers rescheduling during deletion	2024-03-26 18:20:04 -04:00
connector	connector/cn_proc: revert "connector: Fix proc_event_num_listeners count not cleared"	2024-02-23 09:25:01 +01:00
counter	…
cpufreq	cpufreq: dt: always allocate zeroed cpumask	2024-04-03 15:28:35 +02:00
cpuidle	cpuidle: haltpoll: Do not enable interrupts when entering idle	2024-01-25 15:35:15 -08:00
crypto	crypto: sun8i-ce - Fix use after free in unprepare	2024-04-03 15:28:40 +02:00
cxl	cxl/trace: Properly initialize cxl_poison region name	2024-04-03 15:28:36 +02:00
dax	…
dca	…
devfreq	PM / devfreq: Synchronize devfreq_monitor_[start/stop]	2024-02-05 20:14:15 +00:00
dio	…
dma	dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA	2024-03-26 18:19:43 -04:00
dma-buf	dma-buf: Fix NULL pointer dereference in sanitycheck()	2024-04-10 16:35:40 +02:00
edac	EDAC/thunderx: Fix possible out-of-bounds string access	2024-01-25 15:35:12 -08:00
eisa	…
extcon	extcon: fix possible name leak in extcon_dev_register()	2024-02-05 20:14:31 +00:00
firewire	firewire: ohci: prevent leak of left-over IRQ on unbind	2024-04-03 15:28:41 +02:00
firmware	x86/boot: Move mem_encrypt= parsing to the decompressor	2024-04-10 16:36:07 +02:00
fpga	…
fsi	…
gnss	…
gpio	gpio: cdev: fix missed label sanitizing in debounce_setup()	2024-04-10 16:36:02 +02:00
gpu	drm/i915/gt: Enable only one CCS for compute workload	2024-04-10 16:36:06 +02:00
greybus	…
hid	HID: amd_sfh: Avoid disabling the interrupt	2024-03-26 18:19:53 -04:00
hsi	…
hte	…
hv	x86/hyperv: Use per cpu initial stack for vtl context	2024-03-26 18:20:06 -04:00
hwmon	hwmon: (amc6821) add of_match table	2024-04-03 15:28:28 +02:00
hwspinlock	…
hwtracing	hwtracing: hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init()	2024-03-26 18:20:06 -04:00
i2c	i2c: i801: Avoid potential double call to gpiod_remove_lookup_table	2024-04-03 15:28:45 +02:00
i3c	i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling	2024-03-26 18:20:01 -04:00
idle	x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram	2024-01-25 15:35:12 -08:00
iio	iio: imu: inv_mpu6050: fix FIFO parsing when empty	2024-04-03 15:28:45 +02:00
infiniband	RDMA/mana_ib: Fix bug in creation of dma regions	2024-03-26 18:20:02 -04:00
input	Input: xpad - add additional HyperX Controller Identifiers	2024-04-03 15:28:41 +02:00
interconnect	interconnect: qcom: sm8550: Enable sync_state	2024-02-23 09:24:57 +01:00
iommu	iommu/dma: Force swiotlb_max_mapping_size on an untrusted device	2024-04-03 15:28:51 +02:00
ipack	…
irqchip	irqchip/renesas-rzg2l: Prevent spurious interrupts when setting trigger type	2024-04-03 15:28:52 +02:00
isdn	…
leds	leds: trigger: netdev: Fix kernel panic on interface rename trig notify	2024-04-03 15:28:27 +02:00
macintosh	…
mailbox	mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt	2024-02-05 20:14:31 +00:00
mcb	…
md	dm integrity: fix out-of-range warning	2024-04-10 16:35:45 +02:00
media	media: nxp: imx8-isi: Mark all crossbar sink pads as MUST_CONNECT	2024-04-03 15:28:18 +02:00
memory	memory: tegra: Correct DLA client names	2024-03-26 18:19:32 -04:00
memstick	…
message	…
mfd	mfd: cs42l43: Fix wrong GPIO_FN_SEL and SPI_CLK_CONFIG1 defaults	2024-03-26 18:19:55 -04:00
misc	mei: me: add arrow lake point H DID	2024-04-03 15:28:43 +02:00
mmc	sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove()	2024-04-03 15:28:56 +02:00
most	…
mtd	mtd: rawnand: Constrain even more when continuous reads are enabled	2024-04-03 15:28:35 +02:00
mux	…
net	ice: fix typo in assignment	2024-04-10 16:36:01 +02:00
nfc	nfc: virtual_ncidev: Add variable to check if ndev is running	2023-12-20 17:01:59 +01:00
ntb	NTB: fix possible name leak in ntb_register_device()	2024-03-26 18:19:48 -04:00
nubus	…
nvdimm	…
nvme	nvme: fix reconnection fail due to reserved tag allocation	2024-03-26 18:20:09 -04:00
nvmem	nvmem: meson-efuse: fix function pointer type mismatch	2024-04-03 15:28:28 +02:00
of	of: module: prevent NULL pointer dereference in vsnprintf()	2024-04-10 16:36:06 +02:00
opp	OPP: debugfs: Fix warning around icc_get_name()	2024-03-26 18:19:40 -04:00
parisc	parisc/power: Fix power soft-off button emulation on qemu	2024-01-31 16:18:52 -08:00
parport	parport: parport_serial: Add Brainboxes device IDs and geometry	2024-01-20 11:51:48 +01:00
pci	PCI: hv: Fix ring buffer size calculation	2024-04-03 15:28:30 +02:00
pcmcia	…
peci	…
perf	drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported	2024-04-10 16:35:58 +02:00
phy	phy: tegra: xusb: Add API to retrieve the port number of phy	2024-04-03 15:28:28 +02:00
pinctrl	gpio: nomadik: fix offset bug in nmk_pmx_set()	2024-03-26 18:19:54 -04:00
platform	platform/x86/intel/tpmi: Change vsec offset to u64	2024-04-03 15:28:31 +02:00
pmdomain	pmdomain: qcom: rpmhpd: Drop SA8540P gfx.lvl	2024-03-26 18:19:23 -04:00
pnp	PNP: ACPI: fix fortify warning	2024-02-05 20:14:15 +00:00
power	power: supply: bq27xxx-i2c: Do not free non existing IRQ	2024-03-06 14:48:37 +00:00
powercap	powercap: intel_rapl_tpmi: Fix System Domain probing	2024-04-03 15:28:19 +02:00
pps	…
ps3	…
ptp	…
pwm	pwm: img: fix pwm clock lookup	2024-04-03 15:28:52 +02:00
rapidio	…
ras	…
regulator	regulator: userspace-consumer: add module device table	2024-03-26 18:19:34 -04:00
remoteproc	remoteproc: virtio: Fix wdg cannot recovery remote processor	2024-04-03 15:28:16 +02:00
reset	reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning	2024-01-20 11:51:44 +01:00
rpmsg	rpmsg: virtio: Free driver_override when rpmsg_remove()	2024-01-31 16:18:50 -08:00
rtc	rtc: mt6397: select IRQ_DOMAIN instead of depending on it	2024-03-26 18:20:06 -04:00
s390	s390/qeth: handle deferred cc1	2024-04-10 16:35:42 +02:00
sbus	…
scsi	scsi: sd: Unregister device if device_add_disk() failed in sd_probe()	2024-04-10 16:36:00 +02:00
sh	…
siox	…
slimbus	slimbus: core: Remove usage of the deprecated ida_simple_xx() API	2024-04-03 15:28:28 +02:00
soc	soc: fsl: qbman: Use raw spinlock for cgr_lock	2024-04-03 15:28:32 +02:00
soundwire	soundwire: fix initializing sysfs for same devices on different buses	2024-01-31 16:18:47 -08:00
spi	spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe	2024-04-10 16:36:01 +02:00
spmi	spmi: mediatek: Fix UAF on device remove	2024-02-05 20:14:32 +00:00
ssb	…
staging	staging: vc04_services: fix information leak in create_component()	2024-04-03 15:28:59 +02:00
target	scsi: target: pscsi: Fix bio_put() for error case	2024-03-01 13:34:59 +01:00
tc	…
tee	tee: optee: Fix kernel panic caused by incorrect error handling	2024-04-03 15:28:44 +02:00
thermal	thermal: devfreq_cooling: Fix perf state when calculate dfc res_util	2024-04-03 15:28:56 +02:00
thunderbolt	thunderbolt: Fix setting the CNS bit in ROUTER_CS_5	2024-02-23 09:25:13 +01:00
tty	Revert "tty: serial: simplify qcom_geni_serial_send_chunk_fifo()"	2024-04-03 15:28:43 +02:00
ufs	scsi: ufs: core: Remove the ufshcd_release() in ufshcd_err_handling_prepare()	2024-03-01 13:34:55 +01:00
uio	uio: Fix use-after-free in uio_open	2024-01-20 11:51:48 +01:00
usb	usb: typec: ucsi: Fix race between typec_switch and role_switch	2024-04-10 16:35:54 +02:00
vdpa	vdpa/mlx5: Allow CVQ size changes	2024-03-26 18:20:10 -04:00
vfio	vfio/pds: Make sure migration file isn't accessed after reset	2024-04-03 15:28:59 +02:00
vhost	virtio/vsock: send credit update during setting SO_RCVLOWAT	2024-01-25 15:35:26 -08:00
video	backlight: lp8788: Fully initialize backlight_properties during probe	2024-03-26 18:19:56 -04:00
virt	…
virtio	virtio: reenable config if freezing device failed	2024-04-03 15:28:36 +02:00
vlynq	…
w1	…
watchdog	watchdog: stm32_iwdg: initialize default timeout	2024-03-26 18:20:02 -04:00
xen	xen/events: increment refcnt only if event channel is refcounted	2024-03-26 18:20:09 -04:00
zorro	…
Kconfig	…
Makefile	…