Expose the MD_CLEAR capability used by Intel MDS mitigations to guests.

Submitted by:	Patrick Mooney <pmooney@pfmooney.com>
Reviewed by:	kib
Tested by:	Patrick on SmartOS with Linux and Windows guests
Obtained from:	Joyent
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D20296
This commit is contained in:
John Baldwin 2019-05-18 21:20:38 +00:00
parent ffda67901e
commit e519cee307
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=347964

View File

@ -437,7 +437,7 @@ x86_emulate_cpuid(struct vm *vm, int vcpu_id,
CPUID_STDEXT_AVX512ER |
CPUID_STDEXT_AVX512CD | CPUID_STDEXT_SHA);
regs[2] = 0;
regs[3] = 0;
regs[3] &= CPUID_STDEXT3_MD_CLEAR;
/* Advertise INVPCID if it is enabled. */
error = vm_get_capability(vm, vcpu_id,