Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <b64f473a-a748-7b6c-4829-609631960cd1@amd.com>
Date:   Mon, 7 Nov 2022 16:43:32 -0600
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.2.2
Content-Language: en-US
To:     Dave Hansen <dave.hansen@intel.com>, x86@kernel.org
Cc:     Borislav Petkov <bp@alien8.de>,
        Boris Ostrovsky <boris.ostrovsky@oracle.com>,
        Dave Hansen <dave.hansen@linux.intel.com>,
        "H. Peter Anvin" <hpa@zytor.com>, Ingo Molnar <mingo@redhat.com>,
        Joao Martins <joao.m.martins@oracle.com>,
        Jonathan Corbet <corbet@lwn.net>,
        Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>,
        Paolo Bonzini <pbonzini@redhat.com>,
        Sean Christopherson <seanjc@google.com>,
        Thomas Gleixner <tglx@linutronix.de>,
        David Woodhouse <dwmw@amazon.co.uk>,
        Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
        Juergen Gross <jgross@suse.com>,
        Peter Zijlstra <peterz@infradead.org>,
        Tony Luck <tony.luck@intel.com>,
        Babu Moger <Babu.Moger@amd.com>,
        Tom Lendacky <thomas.lendacky@amd.com>, kvm@vger.kernel.org,
        linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org
References: <20221104213651.141057-1-kim.phillips@amd.com>
 <b2274949-8fba-24ff-89bf-627f288ace06@intel.com>
From:   Kim Phillips <kim.phillips@amd.com>
Subject: Re: [PATCH 0/3] x86/speculation: Support Automatic IBRS
In-Reply-To: <b2274949-8fba-24ff-89bf-627f288ace06@intel.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?SW1FV1FHc2d2emd5NEZrZzNYQzVlNzJGTlQ5VjgzYU9QZ1FCakZYMklpM1B1?=
 =?utf-8?B?c3VBM3NULzUwQjBZYWFTcWRxT1YvZHc1TTI3ZHlqazJzaFI4S3doSmRaaXF6?=
 =?utf-8?B?QVpEai9yZUc5QWd2RHR6RUJSVUxyV05yMXJNRjNIekJKN1JtMzRHN1RCL1Zj?=
 =?utf-8?B?SFFXOEExRDlmSnA4dDZ5Y1BYbWdXT1pLVTJiNWxLQmRDcDRIeEpYVnEwekFK?=
 =?utf-8?B?SEhYVFU5bHBkN0pOUU4yZG1ERkwwSmQrZDgwbWZ5djhaK3hyWkNQNkNzazJl?=
 =?utf-8?B?MzVNSlFBOWI3bDA1aEVpeGhNNHdua2tIUUxYWUh4dFh4ZTlTRlNSMTJFbnlX?=
 =?utf-8?B?QXExQ2dlY005WUUvdjFlNmszMko1cXRRN2xZR3l0dUJPdWpqOVIwRXFpcG5q?=
 =?utf-8?B?S0I0bEdUaEVFNHUxdThmYWtDUVk1bFZ1bTZyeGlrWnM0eW5zUHkyV0NUWlhS?=
 =?utf-8?B?Z3VQdUt4OTl3UXB0RmV1NzlJYXdFbmtSZE53ajdYaFk1NWFmc1VTT3c2WUlZ?=
 =?utf-8?B?aDMrcFRyMG4wbk4rbDQ3cFZZRGptUXJlVjJ3bGt3ZUIxbEFJTGJ6Zy9iZWp6?=
 =?utf-8?B?RXdPTVc2ZmhDK1RhNUpSSzZVSDFnT3pDWkxpZW80cStCKy9RL2RtZEY2dnpZ?=
 =?utf-8?B?R1pxR2FwTnVjWG9FYm5LN29tdmUySm1uOFVBdmZvSnZ1WkQ0TTByWDV3NXIr?=
 =?utf-8?B?RlFtZC9YK2wrRUdjTnU1cXp1eGlDTDFtUzlIM24yZ0pIUEkwWk1VSHVLdHlU?=
 =?utf-8?B?OG9kNm93bG5GVE5mTWNSMEVwb05FWkRWaFp5RThqblZXd2FaZXZLM3JkbzZl?=
 =?utf-8?B?NzdvelkyQ0FWQVE0clFmRUd4ZGlEaGVkRGV2aVpTQkxLSklNb1UxbEdDam9E?=
 =?utf-8?B?S2lRM003VG9DUXN0K1Nhc0pHODUzODJTVTFOQzFjajZheWMrWm1WelZ5aU1r?=
 =?utf-8?B?U09HZVpGWkx3dk84QU1DK21KUldFb29EWGpQRzdaNngyc1h6T2N3TkZFcmdK?=
 =?utf-8?B?Z0F3RVFyV3VlcmVpSjFXYkhrUHlrTjQraitqWWtBTCtnWEtPSHBBME14SDFR?=
 =?utf-8?B?RE9QQnJYWXpaN3dka05keFZ3THFVTHlNcWczZHhRdmtFa3J2WUZqSEtCZFJB?=
 =?utf-8?B?dVc4K0tGZnhIbUFnOTIvQTJ1UGhaSVhxT0xXVnllbDFVazhjOGdOQkwweVhl?=
 =?utf-8?B?V004b3l0azJtcHJYSW4vamlULzJ2WEJVYUZyRmNmbU80a0hndG9mZmJBR2pM?=
 =?utf-8?B?M1RWcW5aOWRiL1ZIVEZkYWV0ZDErelU2anpBYS9USXhOcUNDVVI0MkJObklj?=
 =?utf-8?B?MTBaTldBTWYrdDRENEd1RnlDbUp5OXUzTmF0NFVtTmRtbVZqR2dVZHQ3cXFG?=
 =?utf-8?B?SG9OdTNGUGdKTHRJenhQeEdON1hDQlBMaXpZNVpnTGhCREkrSUhOaXlmbUIy?=
 =?utf-8?B?SllCK1EyRVdVdFBLdnVBVllITTlJWkNpazVnRnFvZkp6UUtKSnBYTWpKSExS?=
 =?utf-8?B?T0lkeUpBRHM5RXFWMFlMNm1wU0tnWER2VVRoVUlLUFNKQWhwUEpyaE9FbmpR?=
 =?utf-8?B?TGQvcTFGeGxXNzlMOXVjczRNQlVUU2hLOE4rY1JRcUlCVlhteU5ibTFCbGhF?=
 =?utf-8?B?Mm9ERS81M3dVNjRUQk9Gc2NhZHNNT1dWeGhCTWk1Mm95djA1Y2NmMGxnRzVN?=
 =?utf-8?B?bng3NmNMdmNmdDdLRHYrajhvZW5ZQkUxVHNVOXdZVTBtNWZDRjNSMlArMTha?=
 =?utf-8?B?WlJHbjF0ck96bmhaTDFvRXZodFJMNklQeUlTYXBBT2svM05pczJiQmRTMUNv?=
 =?utf-8?B?c3hnUFk3dmxDMHA3S3AxNVNhakx1M014a0Q2cWJMd0hiaTB4bWFVdlpRTFpY?=
 =?utf-8?B?bTY3alNjUWloN1hCYjY4alAvTXRNQi83SUhQdE1pUE5TZ3JtQlJxWDNVYk9X?=
 =?utf-8?B?U2lVV3RRcVA3c0lZUEZtQmRpQTlSK3FkVzNuR0hvZjI3MWN4YkdKbXZSM2JR?=
 =?utf-8?B?eFpFdmFxbnR6eCtmWG9PR3pmTy96aS8zU0I4MmhucWJlWm9CVHZkckVuU0RS?=
 =?utf-8?B?UDR3ajVUOEtZWTMrQVpaU3Y2MC9Zano1NmNMMTRrU0tzRUI5NTY2aytrQjcw?=
 =?utf-8?Q?bQKnTeV9vaRhJDNRyYIW932r3?=
X-OriginatorOrg: amd.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 68e3b62b-f9ad-419b-db93-08dac11181c0
X-MS-Exchange-CrossTenant-AuthSource: DS7PR12MB6263.namprd12.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Nov 2022 22:43:36.2788
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: UhVfT+QsLivKaCmiERAeFKC2ida+wMPQ17ggnkWZF4PHNiOEDYDwqj6z3eh9dwXvhamSMht6Ry2x1RX3CQ0uig==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR12MB4352
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A,RCVD_IN_DNSWL_NONE,
        RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS autolearn=ham
        autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On 11/4/22 5:06 PM, Dave Hansen wrote:
> On 11/4/22 14:36, Kim Phillips wrote:
>> The AMD Zen4 core supports a new feature called Automatic IBRS.
>> (Indirect Branch Restricted Speculation).
>>
>> Enable Automatic IBRS by default if the CPU feature is present.
>> It typically provides greater performance over the incumbent
>> generic retpolines mitigation.
> 
> Could you also share some information on how this differs from EIBRS and

Some differences are:

1. Unlike EIBRS, AutoIBRS needs STIBP always-on
2. Unlike EIBRS, AutoIBRS doesn't need to clear the RSB on VMEXIT
3. Unlike EIBRS, no AutoIBRS processors are vulnerable to RETBLEED
4. Unlike EIBRS, AutoIBRS doesn't need
4. eIBRS also considers user/supervisor as well as host/guest modes when
    determining its 'predictor mode', whereas AutoIBRS only affects CPL0.
5. eIBRS also groups CPL0/1/2 together, vs. just CPL0 for AutoIBRS.

> why it needs to exist in parallel to EBIRS?

If by 'in parallel' you mean why do these patches not tack AutoIBRS
onto the SPECTRE_V2_EIBRS enum, there's no big reason, other than
now that I've tried to implement it that way, the number of changes
to bugs.c goes from 34 lines changed to 58, mostly due to exceptions
caused by items such as #3 above, and ignoring EIBRS_RETPOLINE and
EIBRS_LFENCE.

I've posted the diff to the 2/3 patch thread, please take a look:

https://lkml.org/lkml/2022/11/7/1462
https://lore.kernel.org/lkml/20221104213651.141057-1-kim.phillips@amd.com/T/#m78ef9bf6a38db8348e0adde3f5ac8b4953200b41

Thanks,

Kim