Re: [edk2] [PATCH] OvmfPkg: prevent code execution from DXE stack

2015-08-28 Thread Laszlo Ersek
: prevent code execution from DXE stack SVN rev 18166 (MdeModulePkg DxeIpl: Add stack NX support) enables platforms to request non-executable stack for the DXE phase, by setting PcdSetNxForStack to TRUE. The PCD defaults to FALSE, because: (a) A non-executable DXE stack is a new feature and causes

Re: [edk2] [PATCH] OvmfPkg: prevent code execution from DXE stack

2015-08-07 Thread Zeng, Star
-Original Message- From: edk2-devel [mailto:edk2-devel-boun...@lists.01.org] On Behalf Of Laszlo Ersek Sent: Saturday, August 8, 2015 12:00 AM To: edk2-devel-01 Cc: Paolo Bonzini; Zeng, Star; Justen, Jordan L Subject: [edk2] [PATCH] OvmfPkg: prevent code execution from DXE stack

[edk2] [PATCH] OvmfPkg: prevent code execution from DXE stack

2015-08-07 Thread Laszlo Ersek
SVN rev 18166 (MdeModulePkg DxeIpl: Add stack NX support) enables platforms to request non-executable stack for the DXE phase, by setting PcdSetNxForStack to TRUE. The PCD defaults to FALSE, because: (a) A non-executable DXE stack is a new feature and causes changes in behavior. Some