From 11faafd9d9739a47d5fa360a43669f52672ef40e Mon Sep 17 00:00:00 2001 From: Julien Grall Date: Mon, 14 Apr 2014 20:00:14 +0100 Subject: [PATCH] xen/arm: Trap cache and TCM lockdown registers Some cp15 c9/c10/c11 encodings are used for: - cache control - TCM control - branch predictor control All of them are implementation defined. For now inject an undefined exception if the guest wants try to access it. This is CVE-2014-2915 / XSA-93. Signed-off-by: Julien Grall Acked-by: Ian Campbell --- xen/arch/arm/traps.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/xen/arch/arm/traps.c b/xen/arch/arm/traps.c index 17ac8d87de..b77e623692 100644 --- a/xen/arch/arm/traps.c +++ b/xen/arch/arm/traps.c @@ -82,7 +82,7 @@ void __cpuinit init_traps(void) /* Setup hypervisor traps */ WRITE_SYSREG(HCR_PTW|HCR_BSU_INNER|HCR_AMO|HCR_IMO|HCR_VM|HCR_TWI|HCR_TSC| - HCR_TAC|HCR_SWIO, HCR_EL2); + HCR_TAC|HCR_SWIO|HCR_TIDCP, HCR_EL2); isb(); } -- 2.39.5