PMR enabling set by pre-boot DMA protection is cleared by RC when boot guard is enabled. Pre-boot DMA protection should only reset VT-d BAR when it is 0 and reset PMR region when it is not programmed to protect all memory address. PlatformVTdInfoSamplePei driver installs the null root entry table ppi. BIOS uses TE with a null root entry table to block VT-d engine access to block any DMA traffic in pre-memory phase.
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2867 Cc: Ray Ni <ray...@intel.com> Cc: Rangasai V Chaganty <rangasai.v.chaga...@intel.com> Sheng Wei (3): IntelSiliconPkg/VtdInfo: Add Null Root Entry Table PPI IntelSiliconPkg/IntelVTdPmrPei: Fix PMR enabling setting confilct IntelSiliconPkg/PlatformVTdInfoSamplePei: Install Null Root Entry Table .../Feature/VTd/IntelVTdPmrPei/IntelVTdPmrPei.c | 14 +++++++ .../Feature/VTd/IntelVTdPmrPei/IntelVTdPmrPei.h | 15 +++++++ .../Feature/VTd/IntelVTdPmrPei/IntelVTdPmrPei.inf | 1 + .../Feature/VTd/IntelVTdPmrPei/VtdReg.c | 47 ++++++++++++++++++++++ .../PlatformVTdInfoSamplePei.c | 16 ++++++++ .../PlatformVTdInfoSamplePei.inf | 3 +- .../Include/Ppi/VtdNullRootEntryTable.h | 28 +++++++++++++ Silicon/Intel/IntelSiliconPkg/IntelSiliconPkg.dec | 1 + 8 files changed, 124 insertions(+), 1 deletion(-) create mode 100644 Silicon/Intel/IntelSiliconPkg/Include/Ppi/VtdNullRootEntryTable.h -- 2.16.2.windows.1 -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#64815): https://edk2.groups.io/g/devel/message/64815 Mute This Topic: https://groups.io/mt/76529332/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
