On 01/09/2025 4:41 pm, Jan Beulich wrote: > On 01.09.2025 17:33, Andrew Cooper wrote: >> On 01/09/2025 10:28 am, Jan Beulich wrote: >>> On 28.08.2025 17:03, Andrew Cooper wrote: >>>> @@ -908,7 +909,29 @@ static void __init noreturn reinit_bsp_stack(void) >>>> if ( cpu_has_xen_shstk ) >>>> { >>>> wrmsrl(MSR_S_CET, xen_msr_s_cet_value()); >>>> - asm volatile ("setssbsy" ::: "memory"); >>>> + >>>> + /* >>>> + * IDT and FRED differ by a Supervisor Token on the shadow stack, >>>> and >>>> + * therefore by the value in MSR_PL0_SSP. >>> Beside not being overly relevant here afaict, is this last part of the >>> sentence >>> actually correct? Patch 06 doesn't write different values into the MSR. >> It is correct, but also well hidden. >> >> #define MSR_FRED_SSP_SL0 MSR_PL0_SSP >> >> I suppose I should should write MSR_PL0_SSP/MSR_FRED_SSP_SL0 here to >> highlight the logically different names for the two modes. > But the code following the comment doesn't access any MSR. That's what > first tripped me up. It was only then that I wasn't able to spot the two > different writes. Now that you point out the aliasing it becomes clear > that until patch 14 it is simply impossible to find that other write.
I suppose the MSR value isn't relevant now that neither paths write the value. The first iteration had both writes here. I guess I can drop that paragraph, and just have the second? ~Andrew