hvm: Extend the CPUID whitelist to include Intel's AES-NI intructions

Signed-off-by: Tim Deegan <Tim.Deegan@citrix.com>

tools/libxc/xc_cpufeature.h

@@ -83,6 +83,7 @@
 #define X86_FEATURE_SSE4_1	(4*32+19) /* Streaming SIMD Extensions 4.1 */
 #define X86_FEATURE_SSE4_2	(4*32+20) /* Streaming SIMD Extensions 4.2 */
 #define X86_FEATURE_POPCNT	(4*32+23) /* POPCNT instruction */
+#define X86_FEATURE_AES		(4*32+25) /* AES acceleration instructions */
 #define X86_FEATURE_XSAVE	(4*32+26) /* XSAVE/XRSTOR/XSETBV/XGETBV */
 #define X86_FEATURE_HYPERVISOR	(4*32+31) /* Running under some hypervisor */
 

tools/libxc/xc_cpuid_x86.c

@@ -190,7 +190,8 @@ static void xc_cpuid_hvm_policy(
                     bitmaskof(X86_FEATURE_CX16) |
                     bitmaskof(X86_FEATURE_SSE4_1) |
                     bitmaskof(X86_FEATURE_SSE4_2) |
-                    bitmaskof(X86_FEATURE_POPCNT));
+                    bitmaskof(X86_FEATURE_POPCNT) |
+                    bitmaskof(X86_FEATURE_AES));
 
         regs[2] |= bitmaskof(X86_FEATURE_HYPERVISOR);