From 27e6f666c2171d7f13dc199b1c5e785f8fc87ccf Mon Sep 17 00:00:00 2001 From: Andrew Jeddeloh Date: Tue, 16 Jan 2018 17:18:24 -0800 Subject: [PATCH] sys-firmware/intel-microcode: add package Needed for spectre mitigation --- .../sys-firmware/intel-microcode-20140430 | 11 ++ .../sys-firmware/intel-microcode-20140624 | 11 ++ .../sys-firmware/intel-microcode-20140913 | 11 ++ .../sys-firmware/intel-microcode-20150121 | 11 ++ .../sys-firmware/intel-microcode-20150121-r1 | 14 ++ .../sys-firmware/intel-microcode-20151106 | 14 ++ .../sys-firmware/intel-microcode-20160607 | 14 ++ .../sys-firmware/intel-microcode-20160714 | 14 ++ .../sys-firmware/intel-microcode-20161104 | 14 ++ .../sys-firmware/intel-microcode-20170511 | 14 ++ .../sys-firmware/intel-microcode-20170707 | 14 ++ .../sys-firmware/intel-microcode-20171117 | 14 ++ .../intel-microcode-20171117_p20171215 | 14 ++ .../intel-microcode-20171117_p20171215-r1 | 14 ++ .../sys-firmware/intel-microcode-20180108 | 14 ++ .../sys-firmware/intel-microcode-20180108-r1 | 14 ++ .../sys-firmware/intel-microcode/Manifest | 14 ++ .../files/intel-microcode2ucode.c | 163 +++++++++++++++++ .../files/intel-microcode2ucode.c-r1 | 166 ++++++++++++++++++ .../intel-microcode-20140430.ebuild | 44 +++++ .../intel-microcode-20140624.ebuild | 44 +++++ .../intel-microcode-20140913.ebuild | 44 +++++ .../intel-microcode-20150121-r1.ebuild | 48 +++++ .../intel-microcode-20150121.ebuild | 44 +++++ .../intel-microcode-20151106.ebuild | 48 +++++ .../intel-microcode-20160607.ebuild | 48 +++++ .../intel-microcode-20160714.ebuild | 48 +++++ .../intel-microcode-20161104.ebuild | 48 +++++ .../intel-microcode-20170511.ebuild | 48 +++++ .../intel-microcode-20170707.ebuild | 48 +++++ .../intel-microcode-20171117.ebuild | 48 +++++ ...tel-microcode-20171117_p20171215-r1.ebuild | 39 ++++ .../intel-microcode-20171117_p20171215.ebuild | 39 ++++ .../intel-microcode-20180108-r1.ebuild | 95 ++++++++++ .../intel-microcode-20180108.ebuild | 48 +++++ .../sys-firmware/intel-microcode/metadata.xml | 13 ++ 36 files changed, 1349 insertions(+) create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20140430 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20140624 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20140913 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20150121 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20150121-r1 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20151106 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20160607 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20160714 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20161104 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20170511 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20170707 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20171117 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20171117_p20171215 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20171117_p20171215-r1 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20180108 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20180108-r1 create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/Manifest create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/files/intel-microcode2ucode.c create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/files/intel-microcode2ucode.c-r1 create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20140430.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20140624.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20140913.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20150121-r1.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20150121.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20151106.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20160607.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20160714.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20161104.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20170511.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20170707.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20171117.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20171117_p20171215-r1.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20171117_p20171215.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20180108-r1.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20180108.ebuild create mode 100644 sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/metadata.xml diff --git a/sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20140430 b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20140430 new file mode 100644 index 0000000000..e61248a8d8 --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/sys-firmware/intel-microcode-20140430 @@ -0,0 +1,11 @@ +DEFINED_PHASES=compile install postinst unpack +DESCRIPTION=Intel IA32 microcode update data +EAPI=4 +HOMEPAGE=http://inertiawar.com/microcode/ https://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=23829 +KEYWORDS=-* amd64 x86 +LICENSE=intel-ucode +RDEPEND=! + */ + + +#ifndef _GNU_SOURCE +# define _GNU_SOURCE 1 +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +struct microcode_header_intel { + unsigned int hdrver; + unsigned int rev; + unsigned int date; + unsigned int sig; + unsigned int cksum; + unsigned int ldrver; + unsigned int pf; + unsigned int datasize; + unsigned int totalsize; + unsigned int reserved[3]; +}; + +union mcbuf { + struct microcode_header_intel hdr; + unsigned int i[0]; + char c[0]; +}; + +int main(int argc, char *argv[]) +{ + char *filename = "/lib/firmware/microcode.dat"; + FILE *f; + char line[LINE_MAX]; + char buf[4000000]; + union mcbuf *mc; + size_t bufsize, count, start; + int rc = EXIT_SUCCESS; + + if (argv[1] != NULL) + filename = argv[1]; + + count = 0; + mc = (union mcbuf *) buf; + f = fopen(filename, "re"); + if (f == NULL) { + printf("open %s: %m\n", filename); + rc = EXIT_FAILURE; + goto out; + } + + while (fgets(line, sizeof(line), f) != NULL) { + if (sscanf(line, "%x, %x, %x, %x", + &mc->i[count], + &mc->i[count + 1], + &mc->i[count + 2], + &mc->i[count + 3]) != 4) + continue; + count += 4; + } + fclose(f); + + bufsize = count * sizeof(int); + printf("%s: %lu(%luk) bytes, %zu integers\n", + filename, + bufsize, + bufsize / 1024, + count); + + if (bufsize < sizeof(struct microcode_header_intel)) + goto out; + + mkdir("intel-ucode", 0750); + + start = 0; + for (;;) { + size_t size; + unsigned int family, model, stepping; + unsigned int year, month, day; + + mc = (union mcbuf *) &buf[start]; + + if (mc->hdr.totalsize) + size = mc->hdr.totalsize; + else + size = 2000 + sizeof(struct microcode_header_intel); + + if (mc->hdr.ldrver != 1 || mc->hdr.hdrver != 1) { + printf("unknown version/format:\n"); + rc = EXIT_FAILURE; + break; + } + + /* + * 0- 3 stepping + * 4- 7 model + * 8-11 family + * 12-13 type + * 16-19 extended model + * 20-27 extended family + */ + family = (mc->hdr.sig >> 8) & 0xf; + if (family == 0xf) + family += (mc->hdr.sig >> 20) & 0xff; + model = (mc->hdr.sig >> 4) & 0x0f; + if (family == 0x06) + model += ((mc->hdr.sig >> 16) & 0x0f) << 4; + stepping = mc->hdr.sig & 0x0f; + + year = mc->hdr.date & 0xffff; + month = mc->hdr.date >> 24; + day = (mc->hdr.date >> 16) & 0xff; + + asprintf(&filename, "intel-ucode/%02x-%02x-%02x", family, model, stepping); + printf("\n"); + printf("%s\n", filename); + printf("signature: 0x%02x\n", mc->hdr.sig); + printf("flags: 0x%02x\n", mc->hdr.pf); + printf("revision: 0x%02x\n", mc->hdr.rev); + printf("date: %04x-%02x-%02x\n", year, month, day); + printf("size: %zu\n", size); + + f = fopen(filename, "ae"); + if (f == NULL) { + printf("open %s: %m\n", filename); + rc = EXIT_FAILURE; + goto out; + } + if (fwrite(mc, size, 1, f) != 1) { + printf("write %s: %m\n", filename); + rc = EXIT_FAILURE; + goto out; + } + fclose(f); + free(filename); + + start += size; + if (start >= bufsize) + break; + } + printf("\n"); +out: + return rc; +} diff --git a/sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/files/intel-microcode2ucode.c-r1 b/sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/files/intel-microcode2ucode.c-r1 new file mode 100644 index 0000000000..4b3ba4b48e --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/files/intel-microcode2ucode.c-r1 @@ -0,0 +1,166 @@ +/* + * Convert Intel microcode.dat into individual ucode files + * named: intel-ucode/$family-$model-$stepping + * + * The subdir intel-ucode/ is created in the current working + * directory. We get multiple ucodes in the same file, so they + * are appended to an existing file. Make sure the directory + * is empty before every run of the converter. + * + * Kay Sievers + */ + + +#ifndef _GNU_SOURCE +# define _GNU_SOURCE 1 +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +struct microcode_header_intel { + unsigned int hdrver; + unsigned int rev; + unsigned int date; + unsigned int sig; + unsigned int cksum; + unsigned int ldrver; + unsigned int pf; + unsigned int datasize; + unsigned int totalsize; + unsigned int reserved[3]; +}; + +union mcbuf { + struct microcode_header_intel hdr; + unsigned int i[0]; + char c[0]; +}; + +int main(int argc, char *argv[]) +{ + char *filename = "/lib/firmware/microcode.dat"; + FILE *f; + char line[LINE_MAX]; + char buf[4000000]; + union mcbuf *mc; + size_t bufsize, count, start; + int rc = EXIT_SUCCESS; + + if (argv[1] != NULL) + filename = argv[1]; + + count = 0; + mc = (union mcbuf *) buf; + f = fopen(filename, "re"); + if (f == NULL) { + printf("open %s: %m\n", filename); + rc = EXIT_FAILURE; + goto out; + } + + while (fgets(line, sizeof(line), f) != NULL) { + if (sscanf(line, "%x, %x, %x, %x", + &mc->i[count], + &mc->i[count + 1], + &mc->i[count + 2], + &mc->i[count + 3]) != 4) + continue; + count += 4; + } + fclose(f); + + bufsize = count * sizeof(int); + printf("%s: %lu(%luk) bytes, %zu integers\n", + filename, + bufsize, + bufsize / 1024, + count); + + if (bufsize < sizeof(struct microcode_header_intel)) + goto out; + + mkdir("intel-ucode", 0750); + + start = 0; + for (;;) { + size_t size; + unsigned int family, model, stepping; + unsigned int year, month, day; + + mc = (union mcbuf *) &buf[start]; + + if (mc->hdr.totalsize) + size = mc->hdr.totalsize; + else + size = 2000 + sizeof(struct microcode_header_intel); + + if (mc->hdr.ldrver != 1 || mc->hdr.hdrver != 1) { + printf("unknown version/format:\n"); + rc = EXIT_FAILURE; + break; + } + + /* + * 0- 3 stepping + * 4- 7 model + * 8-11 family + * 12-13 type + * 16-19 extended model + * 20-27 extended family + */ + family = (mc->hdr.sig >> 8) & 0xf; + if (family == 0xf) + family += (mc->hdr.sig >> 20) & 0xff; + model = (mc->hdr.sig >> 4) & 0x0f; + if (family == 0x06) + model += ((mc->hdr.sig >> 16) & 0x0f) << 4; + stepping = mc->hdr.sig & 0x0f; + + year = mc->hdr.date & 0xffff; + month = mc->hdr.date >> 24; + day = (mc->hdr.date >> 16) & 0xff; + + if (asprintf(&filename, "intel-ucode/%02x-%02x-%02x", family, model, stepping) < 0) { + rc = EXIT_FAILURE; + goto out; + } + printf("\n"); + printf("%s\n", filename); + printf("signature: 0x%02x\n", mc->hdr.sig); + printf("flags: 0x%02x\n", mc->hdr.pf); + printf("revision: 0x%02x\n", mc->hdr.rev); + printf("date: %04x-%02x-%02x\n", year, month, day); + printf("size: %zu\n", size); + + f = fopen(filename, "ae"); + if (f == NULL) { + printf("open %s: %m\n", filename); + rc = EXIT_FAILURE; + goto out; + } + if (fwrite(mc, size, 1, f) != 1) { + printf("write %s: %m\n", filename); + rc = EXIT_FAILURE; + goto out; + } + fclose(f); + free(filename); + + start += size; + if (start >= bufsize) + break; + } + printf("\n"); +out: + return rc; +} diff --git a/sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20140430.ebuild b/sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20140430.ebuild new file mode 100644 index 0000000000..4cfb5a9697 --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/sys-firmware/intel-microcode/intel-microcode-20140430.ebuild @@ -0,0 +1,44 @@ +# Copyright 1999-2014 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI="4" + +inherit toolchain-funcs + +# Find updates by searching and clicking the first link (hopefully it's the one): +# http://www.intel.com/content/www/us/en/search.html?keyword=Processor+Microcode+Data+File + +NUM="23829" +DESCRIPTION="Intel IA32 microcode update data" +HOMEPAGE="http://inertiawar.com/microcode/ https://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=${NUM}" +SRC_URI="http://downloadmirror.intel.com/${NUM}/eng/microcode-${PV}.tgz" + +LICENSE="intel-ucode" +SLOT="0" +KEYWORDS="-* amd64 x86" +IUSE="" + +RDEPEND="! + + + + base-system@gentoo.org + Gentoo Base System + + + install a small initramfs for use with CONFIG_MICROCODE_EARLY + install the large text microcode.dat (used by older kernels via microcode_ctl) + install the split binary ucode files (used by the kernel directly) + +