Re: [PATCH v2] x86/sev: Initialize ctxt variable and zero fi
From: Tom Lendacky
Date: Tue Nov 19 2024 - 09:23:35 EST
On 11/18/24 16:58, Ragavendra wrote:
> Updating the ctxt value to {} in the svsm_perform_ghcb_protocol as
> it was not initialized. Updating memory to zero for the ctxt->fi
> variable in verify_exception_info when ES_EXCEPTION is returned.
>
> Fixes: 34ff65901735 x86/sev: Use kernel provided SVSM Calling Areas
> Signed-off-by: Ragavendra Nagraj <ragavendra.bn@xxxxxxxxx>
> ---
> arch/x86/coco/sev/shared.c | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/arch/x86/coco/sev/shared.c b/arch/x86/coco/sev/shared.c
> index 71de53194089..5e0f6fbf4dd2 100644
> --- a/arch/x86/coco/sev/shared.c
> +++ b/arch/x86/coco/sev/shared.c
> @@ -239,6 +239,8 @@ static enum es_result verify_exception_info(struct ghcb *ghcb, struct es_em_ctxt
> if ((info & SVM_EVTINJ_VALID) &&
> ((v == X86_TRAP_GP) || (v == X86_TRAP_UD)) &&
> ((info & SVM_EVTINJ_TYPE_MASK) == SVM_EVTINJ_TYPE_EXEPT)) {
> + memset(&ctxt->fi, 0, sizeof(ctxt->fi));
> +
> ctxt->fi.vector = v;
>
> if (info & SVM_EVTINJ_VALID_ERR)
> @@ -335,7 +337,7 @@ static int svsm_perform_msr_protocol(struct svsm_call *call)
>
> static int svsm_perform_ghcb_protocol(struct ghcb *ghcb, struct svsm_call *call)
> {
> - struct es_em_ctxt ctxt;
> + struct es_em_ctxt ctxt = {};
This isn't necessary if you are doing the memset.
Thanks,
Tom
> u8 pending = 0;
>
> vc_ghcb_invalidate(ghcb);