virt/coco/sev-guest: Double-buffer messages
authorDionna Glaze <dionnaglaze@google.com>
Tue, 7 Mar 2023 19:24:48 +0000 (20:24 +0100)
committerBorislav Petkov (AMD) <bp@alien8.de>
Tue, 21 Mar 2023 12:20:04 +0000 (13:20 +0100)
commit965006103a14703cc42043bbf9b5e0cdf7a468ad
tree567516aa0920c9c1d6f027f9ad5f39293bf677d7
parentdbf07b544ca12c0ab8bd3fc1ea3509ea713a8bf5
virt/coco/sev-guest: Double-buffer messages

The encryption algorithms read and write directly to shared unencrypted
memory, which may leak information as well as permit the host to tamper
with the message integrity. Instead, copy whole messages in or out as
needed before doing any computation on them.

Fixes: d5af44dde546 ("x86/sev: Provide support for SNP guest request NAEs")
Signed-off-by: Dionna Glaze <dionnaglaze@google.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/r/20230214164638.1189804-3-dionnaglaze@google.com
drivers/virt/coco/sev-guest/sev-guest.c