diff --git a/libraries/libmesosphere/include/mesosphere/arch/arm64/kern_assembly_macros.h b/libraries/libmesosphere/include/mesosphere/arch/arm64/kern_assembly_macros.h index 97b50af..8dfafdc 100644 --- a/libraries/libmesosphere/include/mesosphere/arch/arm64/kern_assembly_macros.h +++ b/libraries/libmesosphere/include/mesosphere/arch/arm64/kern_assembly_macros.h @@ -94,3 +94,8 @@ ENABLE_FPU(xtmp1) \ GET_THREAD_CONTEXT_AND_RESTORE_FPCR_FPSR(ctx, xtmp1, xtmp2, wtmp1, wtmp2) \ RESTORE_FPU32_ALL_REGISTERS(ctx, xtmp1) + +#define ERET_WITH_SPECULATION_BARRIER \ + eret; \ + dsb nsh; \ + isb diff --git a/libraries/libmesosphere/source/arch/arm64/svc/kern_svc_exception_asm.s b/libraries/libmesosphere/source/arch/arm64/svc/kern_svc_exception_asm.s index 2194c59..c3ee6a0 100644 --- a/libraries/libmesosphere/source/arch/arm64/svc/kern_svc_exception_asm.s +++ b/libraries/libmesosphere/source/arch/arm64/svc/kern_svc_exception_asm.s @@ -130,4 +130,4 @@ /* Return. */ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) - eret + ERET_WITH_SPECULATION_BARRIER diff --git a/libraries/libmesosphere/source/arch/arm64/svc/kern_svc_handlers_asm.s b/libraries/libmesosphere/source/arch/arm64/svc/kern_svc_handlers_asm.s index d795c6a..6e6f07a 100644 --- a/libraries/libmesosphere/source/arch/arm64/svc/kern_svc_handlers_asm.s +++ b/libraries/libmesosphere/source/arch/arm64/svc/kern_svc_handlers_asm.s @@ -194,7 +194,7 @@ /* Return. */ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) - eret + ERET_WITH_SPECULATION_BARRIER 5: /* Return from SVC. */ @@ -297,7 +297,7 @@ /* Return. */ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) - eret + ERET_WITH_SPECULATION_BARRIER /* ams::kern::arch::arm64::SvcHandler32() */ .section .text._ZN3ams4kern4arch5arm6412SvcHandler32Ev, "ax", %progbits @@ -467,7 +467,7 @@ /* Return. */ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) - eret + ERET_WITH_SPECULATION_BARRIER 5: /* Return from SVC. */ @@ -547,4 +547,4 @@ /* Return. */ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) - eret + ERET_WITH_SPECULATION_BARRIER diff --git a/mesosphere/kernel/source/arch/arm64/init/start.s b/mesosphere/kernel/source/arch/arm64/init/start.s index 0a11c82..5d9084b 100644 --- a/mesosphere/kernel/source/arch/arm64/init/start.s +++ b/mesosphere/kernel/source/arch/arm64/init/start.s @@ -377,7 +377,7 @@ mov x0, #0xC5 msr spsr_el2, x0 - eret + ERET_WITH_SPECULATION_BARRIER #endif /* ams::kern::init::DisableMmuAndCaches() */ diff --git a/mesosphere/kernel/source/arch/arm64/kern_exception_handlers_asm.s b/mesosphere/kernel/source/arch/arm64/kern_exception_handlers_asm.s index a23cebc..d81eb7e 100644 --- a/mesosphere/kernel/source/arch/arm64/kern_exception_handlers_asm.s +++ b/mesosphere/kernel/source/arch/arm64/kern_exception_handlers_asm.s @@ -64,7 +64,7 @@ add sp, sp, #(8 * 24) /* Return from the exception. */ - eret + ERET_WITH_SPECULATION_BARRIER /* ams::kern::arch::arm64::EL0A64IrqExceptionHandler() */ .section .text._ZN3ams4kern4arch5arm6425EL0A64IrqExceptionHandlerEv, "ax", %progbits @@ -150,7 +150,7 @@ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) /* Return from the exception. */ - eret + ERET_WITH_SPECULATION_BARRIER /* ams::kern::arch::arm64::EL0A32IrqExceptionHandler() */ .section .text._ZN3ams4kern4arch5arm6425EL0A32IrqExceptionHandlerEv, "ax", %progbits @@ -218,7 +218,7 @@ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) /* Return from the exception. */ - eret + ERET_WITH_SPECULATION_BARRIER /* ams::kern::arch::arm64::EL0SynchronousExceptionHandler() */ .section .text._ZN3ams4kern4arch5arm6430EL0SynchronousExceptionHandlerEv, "ax", %progbits @@ -331,7 +331,7 @@ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) /* Return from the exception. */ - eret + ERET_WITH_SPECULATION_BARRIER 4: /* SVC from aarch32. */ ldp x16, x17, [sp], 16 @@ -377,7 +377,7 @@ ldp x16, x17, [sp], 16 /* Return from the exception. */ - eret + ERET_WITH_SPECULATION_BARRIER /* ams::kern::arch::arm64::EL1SynchronousExceptionHandler() */ @@ -441,7 +441,7 @@ /* Return false. */ mov x0, #0x0 msr elr_el1, x30 - eret + ERET_WITH_SPECULATION_BARRIER 2: /* The exception wasn't an triggered by copying memory from userspace. */ ldr x0, [sp, #8] @@ -519,7 +519,7 @@ mrs x0, tpidr_el1 /* Return from the exception. */ - eret + ERET_WITH_SPECULATION_BARRIER /* ams::kern::arch::arm64::FpuAccessExceptionHandler() */ @@ -542,7 +542,7 @@ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) /* Return from the exception. */ - eret + ERET_WITH_SPECULATION_BARRIER /* ams::kern::arch::arm64::EL1SystemErrorHandler() */ .section .text._ZN3ams4kern4arch5arm6421EL1SystemErrorHandlerEv, "ax", %progbits @@ -680,5 +680,5 @@ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) /* Return from the exception. */ - eret + ERET_WITH_SPECULATION_BARRIER diff --git a/mesosphere/kernel/source/arch/arm64/kern_k_thread_context_asm.s b/mesosphere/kernel/source/arch/arm64/kern_k_thread_context_asm.s index 0800485..362adc7 100644 --- a/mesosphere/kernel/source/arch/arm64/kern_k_thread_context_asm.s +++ b/mesosphere/kernel/source/arch/arm64/kern_k_thread_context_asm.s @@ -14,6 +14,7 @@ * along with this program. If not, see . */ #include +#include /* ams::kern::arch::arm64::UserModeThreadStarter() */ .section .text._ZN3ams4kern4arch5arm6421UserModeThreadStarterEv, "ax", %progbits @@ -62,7 +63,7 @@ add sp, sp, #(EXCEPTION_CONTEXT_SIZE) /* Return to EL0 */ - eret + ERET_WITH_SPECULATION_BARRIER /* ams::kern::arch::arm64::SupervisorModeThreadStarter() */ .section .text._ZN3ams4kern4arch5arm6427SupervisorModeThreadStarterEv, "ax", %progbits @@ -84,6 +85,3 @@ /* Mask I bit in DAIF */ msr daifclr, #2 br x1 - - /* This should never execute, but Nintendo includes an ERET here. */ - eret