Re: [edk2] [PATCH v3 6/6] MdeModulePkg/DxeCore: implement memory protection policy

2017-02-27 Thread Ard Biesheuvel
On 27 February 2017 at 09:56, Laszlo Ersek wrote: > On 02/26/17 19:30, Ard Biesheuvel wrote: >> This implements a DXE memory protection policy that ensure that regions >> that don't require executable permissions are mapped with the non-exec >> attribute set. >> >> First of all, it iterates over a

Re: [edk2] [PATCH v3 6/6] MdeModulePkg/DxeCore: implement memory protection policy

2017-02-27 Thread Laszlo Ersek
On 02/26/17 19:30, Ard Biesheuvel wrote: > This implements a DXE memory protection policy that ensure that regions > that don't require executable permissions are mapped with the non-exec > attribute set. > > First of all, it iterates over all entries in the UEFI memory map, and > removes executab

Re: [edk2] [PATCH v3 6/6] MdeModulePkg/DxeCore: implement memory protection policy

2017-02-26 Thread Gao, Liming
Ard: I have minor comment. GetPermissionAttributeForMemoryType() function header comment doesn't match its definition, and IsInSmm() has no function header. Thanks Liming >-Original Message- >From: Ard Biesheuvel [mailto:ard.biesheu...@linaro.org] >Sent: Monday, February 27, 2017 2:30

[edk2] [PATCH v3 6/6] MdeModulePkg/DxeCore: implement memory protection policy

2017-02-26 Thread Ard Biesheuvel
This implements a DXE memory protection policy that ensure that regions that don't require executable permissions are mapped with the non-exec attribute set. First of all, it iterates over all entries in the UEFI memory map, and removes executable permissions according to the configured DXE memory