Branch: refs/heads/next
Home: https://github.com/siemens/jailhouse
Commit: 6e27d3af3557c8d1bca5423aee32e828cca567c0
https://github.com/siemens/jailhouse/commit/6e27d3af3557c8d1bca5423aee32e828cca567c0
Author: Jan Kiszka <[email protected]>
Date: 2019-06-10 (Mon, 10 Jun 2019)
Changed paths:
M hypervisor/arch/arm-common/smccc.c
Log Message:
-----------
arm: Account for non-compliant PSCI_VERSION return codes
U-Boot returns PSCI_NOT_SUPPORTED, rather than the implemented 0.2. This
is practically harmless as the succeeding PSCI 1.0 call will then fail,
but it is cleaner to filter out all negative return codes.
Fixes: ea924a3fec98 ("arm64: Initialise SMCCC backend")
Signed-off-by: Jan Kiszka <[email protected]>
Tested-by: Ralf Ramsauer <[email protected]>
Commit: 7c0d292ba15aeaea482be984f9082143fd2bb275
https://github.com/siemens/jailhouse/commit/7c0d292ba15aeaea482be984f9082143fd2bb275
Author: Jan Kiszka <[email protected]>
Date: 2019-06-10 (Mon, 10 Jun 2019)
Changed paths:
M configs/arm/orangepi0.c
Log Message:
-----------
configs: orangepi0: Keep hypervisor away from "secure" memory
U-Boot places its PSCI EL3 code at 0x4ffbb000, and Jailhouse so far
overwrote this during enabling - because it was not secured. This
slipped through widely unnoticed as long as no one tried physical
CPU offline/online after Jailhouse ran. But since we implemented Spectre
mitigation, we started to query the firmware - and crashed. Avoid this
by keeping some safe gap to the firmware, reducing the hypervisor memory
by 320K.
Fixes: MiniDebConf 2019 live demo
Signed-off-by: Jan Kiszka <[email protected]>
Compare:
https://github.com/siemens/jailhouse/compare/96157677dfbb...7c0d292ba15a
--
You received this message because you are subscribed to the Google Groups
"Jailhouse" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/jailhouse-dev/siemens/jailhouse/push/refs/heads/next/961576-7c0d29%40github.com.
For more options, visit https://groups.google.com/d/optout.
