mirror of
https://github.com/edk2-porting/linux-next.git
synced 2024-12-26 06:04:14 +08:00
f007e99c8e
To support domain-isolation usages, the platform hardware must be capable of uniquely identifying the requestor (source-id) for each interrupt message. Without source-id checking for interrupt remapping , a rouge guest/VM with assigned devices can launch interrupt attacks to bring down anothe guest/VM or the VMM itself. This patch adds source-id checking for interrupt remapping, and then really isolates interrupts for guests/VMs with assigned devices. Because PCI subsystem is not initialized yet when set up IOAPIC entries, use read_pci_config_byte to access PCI config space directly. Signed-off-by: Weidong Han <weidong.han@intel.com> Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
11 lines
240 B
C
11 lines
240 B
C
#include <linux/intel-iommu.h>
|
|
|
|
struct ioapic_scope {
|
|
struct intel_iommu *iommu;
|
|
unsigned int id;
|
|
unsigned int bus; /* PCI bus number */
|
|
unsigned int devfn; /* PCI devfn number */
|
|
};
|
|
|
|
#define IR_X2APIC_MODE(mode) (mode ? (1 << 11) : 0)
|