diff options
| author | Jordy Zomer <jordy@pwning.systems> | 2022-01-29 16:06:04 +0100 |
|---|---|---|
| committer | Sumit Semwal <sumit.semwal@linaro.org> | 2022-02-01 13:18:09 +0530 |
| commit | 92c4cfaee6872038563c5b6f2e8e613f9d84d47d (patch) | |
| tree | 6ce6eacdcc10c27bf52fe84152d9f8712fded63a /Documentation/gpu | |
| parent | 1b777d4d9e383d2744fc9b3a09af6ec1893c8b1a (diff) | |
| download | linux-stable-92c4cfaee6872038563c5b6f2e8e613f9d84d47d.tar.gz linux-stable-92c4cfaee6872038563c5b6f2e8e613f9d84d47d.tar.bz2 linux-stable-92c4cfaee6872038563c5b6f2e8e613f9d84d47d.zip | |
dma-buf: heaps: Fix potential spectre v1 gadget
It appears like nr could be a Spectre v1 gadget as it's supplied by a
user and used as an array index. Prevent the contents
of kernel memory from being leaked to userspace via speculative
execution by using array_index_nospec.
Signed-off-by: Jordy Zomer <jordy@pwning.systems>
Fixes: c02a81fba74f ("dma-buf: Add dma-buf heaps framework")
Cc: <stable@vger.kernel.org> # v5.6+
Acked-by: John Stultz <john.stultz@linaro.org>
Signed-off-by: Sumit Semwal <sumit.semwal@linaro.org>
[sumits: added fixes and cc: stable tags]
Link: https://patchwork.freedesktop.org/patch/msgid/20220129150604.3461652-1-jordy@pwning.systems
Diffstat (limited to 'Documentation/gpu')
0 files changed, 0 insertions, 0 deletions