Mark Rutland 5e1ca5e23b KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_mmio_read_apr() ...

It's possible for userspace to control n. Sanitize n when using it as an
array index.

Note that while it appears that n must be bound to the interval [0,3]
due to the way it is extracted from addr, we cannot guarantee that
compiler transformations (and/or future refactoring) will ensure this is
the case, and given this is a slow path it's better to always perform
the masking.

Found by smatch.

Signed-off-by: Mark Rutland <mark.rutland@arm.com>
Acked-by: Christoffer Dall <christoffer.dall@arm.com>
Acked-by: Marc Zyngier <marc.zyngier@arm.com>
Cc: kvmarm@lists.cs.columbia.edu
Signed-off-by: Will Deacon <will.deacon@arm.com>

2018-04-26 17:06:00 +01:00

..

arm

KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_mmio_read_apr()

2018-04-26 17:06:00 +01:00

async_pf.c

kvm,async_pf: Use swq_has_sleeper()

2017-09-15 16:57:11 +02:00

async_pf.h

KVM: fix checkpatch.pl errors in kvm/async_pf.h

2015-06-19 17:16:25 +02:00

coalesced_mmio.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

coalesced_mmio.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

eventfd.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

irqchip.c

KVM: use rcu access function for irq routing

2017-07-07 15:24:15 +02:00

Kconfig

KVM: introduce kvm_arch_vcpu_async_ioctl

2017-12-14 09:26:59 +01:00

kvm_main.c

kvm: use insert sort in kvm_io_bus_register_dev function

2018-03-06 18:40:44 +01:00

vfio.c

vfio: New external user group/file match

2017-06-28 13:50:05 -06:00

vfio.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00