From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pf1-f202.google.com (mail-pf1-f202.google.com [209.85.210.202]) by mx.groups.io with SMTP id smtpd.web08.434.1665002032509529097 for ; Wed, 05 Oct 2022 13:33:52 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@google.com header.s=20210112 header.b=A1BVvQpG; spf=pass (domain: flex--dionnaglaze.bounces.google.com, ip: 209.85.210.202, mailfrom: 3l-o9ywskbrw5agff28d2r68gg8d6.4ge56n6d65cu.8jgmhk.ag@flex--dionnaglaze.bounces.google.com) Received: by mail-pf1-f202.google.com with SMTP id ay1-20020a056a00300100b0053e7e97696bso3186pfb.3 for ; Wed, 05 Oct 2022 13:33:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date; bh=l8+iE4R/XCE22/5+3+fsaQpWonjnLMO7DpJ3JevLWRA=; b=A1BVvQpG+B5S5CQsYl7VErvvtTkkcFcNuLiJoWZ3tdVyeMNQ7e9r7o1eGcTdNnpJv5 cmAPDnOfmEvejreM5hHTwkd19x57n+jiTP3/MFivOGBQ0Pv09QTH0I2k2sgGKyS1FOLD nY/qhsRU/2LP55P3LuBdeHnarbtgy+xHKiV5a0VOhE1ZMzkzJYg6prlEXEA2MbJ0+M7x XnPFfi5uwdpdsnDH7MNKrrYbDGc7R+C0LcPJwsTq6AniNaZsq3VlgGp4EtTEZF0ifG4V blbmbTLr1qmFtWsHfqeLfDPGfx6R2i1akQPdbknAuQY7IZJvKkBp5RN+syOEw2Vvjs1O TUrw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date; bh=l8+iE4R/XCE22/5+3+fsaQpWonjnLMO7DpJ3JevLWRA=; b=I8XXazPbl7RdeAV7msQgWPUXx7dJnGB0FCTSWjQVfA0X3KwnygNsFnaz+ejx67G4n9 riyHDSfe9QxiRirGXxNf4UIseQ/8fMeen/UGFdkMHBeUl5QYX6vJusY92fsijmKGPDp9 t6wbamx2M2Cy60h2w7UIYuwbdbBzN8C9v5GeG484cQL0dkGk/F89pwIYKH/D6S3zlxA3 KB6In8HEUZRbqWVBcayHAe7GP6jUkLr5mm+JanFgHVC5qF/MuFTQV2wK9CRbiazYttQw 3r6Y6RsOV3wRErDAO0JHCCVg1PdzlDYW2SzaqbN0asQaHypg+PVQupMlSQtpqWMUf25s UVTg== X-Gm-Message-State: ACrzQf3CtGzAVJO048MOvfjgztBIk4CFAZlkmPpnT+qFZO1q5LD4PRCx epxXQPr2XD/CyW3shPJ0UgUvdMy3xuDY5Zx5gAMDfDgNT7ibV4H7+dYnH73/+FJZaJGz468jDFA KAlh0wATIWoU4YjuZsoiyYciwqTvtzyvqFnNCnRi5bDIAMa343fmSdjGY558etq16uqWDRLOZ X-Google-Smtp-Source: AMsMyM4BoUlasRAvgjMBvOchmbjTbALtR7fFGCk2w8btYYBwkvioZmi5SNJuvfeqjSZBJJJBZL+2sC6/oKrM1NiWuQ== X-Received: from dionnaglaze.c.googlers.com ([fda3:e722:ac3:cc00:7f:e700:c0a8:2ee6]) (user=dionnaglaze job=sendgmr) by 2002:a17:90a:cd06:b0:203:ae0e:6a21 with SMTP id d6-20020a17090acd0600b00203ae0e6a21mr99721pju.0.1665002031454; Wed, 05 Oct 2022 13:33:51 -0700 (PDT) Date: Wed, 5 Oct 2022 20:33:29 +0000 In-Reply-To: <20221005203329.469866-1-dionnaglaze@google.com> Mime-Version: 1.0 References: <20221005203329.469866-1-dionnaglaze@google.com> X-Mailer: git-send-email 2.38.0.rc1.362.ged0d419d3c-goog Message-ID: <20221005203329.469866-8-dionnaglaze@google.com> Subject: [PATCH v7 7/7] OvmfPkg/PlatformPei: SEV-SNP make >=4GB unaccepted From: "Dionna Glaze" To: devel@edk2.groups.io Cc: Dionna Glaze , Ard Biescheuvel , "Min M. Xu" , Gerd Hoffmann , James Bottomley , Tom Lendacky , Jiewen Yao , Erdem Aktas Content-Type: text/plain; charset="UTF-8" Instead of eagerly accepting all memory in PEI, only accept memory under the 4GB address. This allows a loaded image to use the ACCEPT_ALL_UNACCEPTED_MEMORY_PROTOCOL to disable the accept behavior and indicate that it can interpret the memory type accordingly. This classification is safe since ExitBootServices will accept and reclassify the memory as conventional if the disable protocol is not used. Cc: Ard Biescheuvel Cc: "Min M. Xu" Cc: Gerd Hoffmann Cc: James Bottomley Cc: Tom Lendacky Cc: Jiewen Yao Cc: Erdem Aktas Signed-off-by: Dionna Glaze --- OvmfPkg/PlatformPei/AmdSev.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/OvmfPkg/PlatformPei/AmdSev.c b/OvmfPkg/PlatformPei/AmdSev.c index 385562b44c..2a52d6f491 100644 --- a/OvmfPkg/PlatformPei/AmdSev.c +++ b/OvmfPkg/PlatformPei/AmdSev.c @@ -16,6 +16,7 @@ #include #include #include +#include #include #include #include @@ -63,6 +64,10 @@ AmdSevSnpInitialize ( for (Hob.Raw = GetHobList (); !END_OF_HOB_LIST (Hob); Hob.Raw = GET_NEXT_HOB (Hob)) { if ((Hob.Raw != NULL) && (GET_HOB_TYPE (Hob) == EFI_HOB_TYPE_RESOURCE_DESCRIPTOR)) { ResourceHob = Hob.ResourceDescriptor; + if (ResourceHob->PhysicalStart >= SIZE_4GB) { + ResourceHob->ResourceType = EFI_RESOURCE_MEMORY_UNACCEPTED; + continue; + } if (ResourceHob->ResourceType == EFI_RESOURCE_SYSTEM_MEMORY) { MemEncryptSevSnpPreValidateSystemRam ( -- 2.38.0.rc1.362.ged0d419d3c-goog