On 14.02.2022 13:51, Andrew Cooper wrote:
> UEFI Runtime services, at the time of writing, aren't CET-IBT compatible.
> Work is ongoing to address this. In the meantime, unconditionally disable IBT.
>
> Signed-off-by: Andrew Cooper <andrew.coop...@citrix.com>
Reviewed-by: Jan Beulich <jbeul...@suse.com>
> --- a/xen/common/efi/runtime.c
> +++ b/xen/common/efi/runtime.c
> @@ -21,6 +21,7 @@ struct efi_rs_state {
> * don't strictly need that.
> */
> unsigned long __aligned(32) cr3;
> + unsigned long msr_s_cet;
> #endif
> };
The latest with the next addition here we will probably want to ...
> @@ -113,6 +114,19 @@ struct efi_rs_state efi_rs_enter(void)
... no longer have this be the function's return type.
Jan
