drivers: speculative load before bound-check
authorJeetesh Burman <jburman@nvidia.com>
Thu, 29 Mar 2018 18:36:55 +0000 (23:36 +0530)
committerMatthew Pedro <mapedro@nvidia.com>
Tue, 10 Apr 2018 05:10:46 +0000 (22:10 -0700)
commit28093308e60367d8c43e86724a5772b68f6dc82c
treed5194c1cdb9507ca57b9484c723050aef8ebfdbe
parent132cd685fa6fd5fd590f69631cea08378dcb1d9a
drivers: speculative load before bound-check

Data can be speculatively loaded from memory and stay in cache even
when bound check fails. This can lead to unintended information
disclosure via side-channel analysis.

To mitigate this problem, insert speculation barrier.

Bug 1964290
CVE-2017-5753

Change-Id: I69ce0633516b3a838cf2547adcff4ded806394e0
Signed-off-by: Hien Goi <hgoi@nvidia.com>
Signed-off-by: James Huang <jamehuang@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1650789
Signed-off-by: Jeetesh Burman <jburman@nvidia.com>
(cherry picked from commit 7541f4625b73b64e0c64b403c6182cb295fd884c)
Reviewed-on: https://git-master.nvidia.com/r/1684501
GVS: Gerrit_Virtual_Submit
Reviewed-by: Bibek Basu <bbasu@nvidia.com>
drivers/media/i2c/tc358840.c
drivers/media/platform/tegra/camera/camera_common.c