[src/trunk]: src/sys/arch/amd64/amd64 Add a TODO list for SVS.

[maxv <maxv%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/4b70d88451b0
branches:  trunk
changeset: 359206:4b70d88451b0
user:      maxv <maxv%NetBSD.org@localhost>
date:      Sun Feb 04 17:03:21 2018 +0000

description:
Add a TODO list for SVS.

diffstat:

 sys/arch/amd64/amd64/machdep.c |  21 +++++++++++++++++++--
 1 files changed, 19 insertions(+), 2 deletions(-)

diffs (42 lines):

diff -r c5a8c5dd91a2 -r 4b70d88451b0 sys/arch/amd64/amd64/machdep.c
--- a/sys/arch/amd64/amd64/machdep.c    Sun Feb 04 16:22:48 2018 +0000
+++ b/sys/arch/amd64/amd64/machdep.c    Sun Feb 04 17:03:21 2018 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: machdep.c,v 1.296 2018/01/26 14:38:46 maxv Exp $       */
+/*     $NetBSD: machdep.c,v 1.297 2018/02/04 17:03:21 maxv Exp $       */
 
 /*
  * Copyright (c) 1996, 1997, 1998, 2000, 2006, 2007, 2008, 2011
@@ -110,7 +110,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: machdep.c,v 1.296 2018/01/26 14:38:46 maxv Exp $");
+__KERNEL_RCSID(0, "$NetBSD: machdep.c,v 1.297 2018/02/04 17:03:21 maxv Exp $");
 
 /* #define XENDEBUG_LOW  */
 
@@ -2267,6 +2267,23 @@
  *     Remote PCPU Areas [OK]
  *     Kernel Heap       [OK]
  *     Kernel Image      [OK]
+ *
+ * TODO:
+ *
+ * (a) The NMI stack is not double-entered. Therefore if we ever receive
+ *     an NMI and leave it, the content of the stack will be visible to
+ *     userland (via Meltdown). Normally we never leave NMIs, unless a
+ *     privileged user launched PMCs. That's unlikely to happen, our PMC
+ *     support is pretty minimal.
+ *
+ * (b) Enable SVS depending on the CPU model, and add a sysctl to disable
+ *     it dynamically.
+ *
+ * (c) Narrow down the entry points: hide the 'jmp handler' instructions.
+ *     This makes sense on GENERIC_KASLR kernels.
+ *
+ * (d) Right now there is only one global LDT, and that's not compatible
+ *     with USER_LDT.
  */
 
 struct svs_utls {