[PATCH 00/16] x86/microcode/AMD: Improve container verification
From: Borislav Petkov
Date: Wed Nov 07 2018 - 12:03:53 EST
From: Borislav Petkov <bp@xxxxxxx>
Hi all,
this is work which got started by Maciej a while ago. I have finally had
the time to redo all the ideas properly, split it in self-contained,
logical chunks and test it.
Reveiew and comments are appreciated.
Thx.
Borislav Petkov (11):
x86/microcode/AMD: Move verify_patch_size() up in the file
x86/microcode/AMD: Clean up per-family patch size checks
x86/microcode/AMD: Cleanup verify_patch_size() more
x86/microcode/AMD: Concentrate patch verification
x86/microcode/AMD: Simplify patch family detection
x86/microcode/AMD: Move patch family check to verify_patch()
x86/microcode/AMD: Move chipset-specific check into verify_patch()
x86/microcode/AMD: Change verify_patch()'s return value
x86/microcode/AMD: Convert early parser to the new verification routines
x86/microcode/AMD: Fix container size's type
x86/microcode/AMD: Update copyright
Maciej S. Szmigiero (5):
x86/microcode/AMD: Subtract SECTION_HDR_SIZE from file leftover length
x86/microcode/AMD: Add microcode container verification
x86/microcode/AMD: Check microcode container data in the late loader
x86/microcode/AMD: Convert CPU equivalence table variable into a struct
x86/microcode/AMD: Check the equivalence table size when scanning it
arch/x86/kernel/cpu/microcode/amd.c | 469 ++++++++++++++++++----------
1 file changed, 307 insertions(+), 162 deletions(-)
--
2.19.1