linux-kernel - Re: [PATCH 00/16] x86/microcode/AMD: Improve container verification

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Sun, 25 Nov 2018 10:50:31 +0100
From:   Pavel Machek <pavel@....cz>
To:     Borislav Petkov <bp@...en8.de>
Cc:     X86 ML <x86@...nel.org>,
        "Maciej S . Szmigiero" <mail@...iej.szmigiero.name>,
        Tom Lendacky <thomas.lendacky@....com>,
        LKML <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH 00/16] x86/microcode/AMD: Improve container verification

On Wed 2018-11-07 18:02:02, Borislav Petkov wrote:
> From: Borislav Petkov <bp@...e.de>
> 
> Hi all,
> 
> this is work which got started by Maciej a while ago. I have finally had
> the time to redo all the ideas properly, split it in self-contained,
> logical chunks and test it.
> 
> Reveiew and comments are appreciated.

Unfortunately, this is not too useful cover letter. It does not tell
us what the goals if the series are, for example :-(.
								Pavel

> Thx.
> 
> Borislav Petkov (11):
>   x86/microcode/AMD: Move verify_patch_size() up in the file
>   x86/microcode/AMD: Clean up per-family patch size checks
>   x86/microcode/AMD: Cleanup verify_patch_size() more
>   x86/microcode/AMD: Concentrate patch verification
>   x86/microcode/AMD: Simplify patch family detection
>   x86/microcode/AMD: Move patch family check to verify_patch()
>   x86/microcode/AMD: Move chipset-specific check into verify_patch()
>   x86/microcode/AMD: Change verify_patch()'s return value
>   x86/microcode/AMD: Convert early parser to the new verification routines
>   x86/microcode/AMD: Fix container size's type
>   x86/microcode/AMD: Update copyright
> 
> Maciej S. Szmigiero (5):
>   x86/microcode/AMD: Subtract SECTION_HDR_SIZE from file leftover length
>   x86/microcode/AMD: Add microcode container verification
>   x86/microcode/AMD: Check microcode container data in the late loader
>   x86/microcode/AMD: Convert CPU equivalence table variable into a struct
>   x86/microcode/AMD: Check the equivalence table size when scanning it
> 
>  arch/x86/kernel/cpu/microcode/amd.c | 469 ++++++++++++++++++----------
>  1 file changed, 307 insertions(+), 162 deletions(-)
> 

-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html

Download attachment "signature.asc" of type "application/pgp-signature" (182 bytes)