drivers: speculative load before bound-check
authorJeetesh Burman <jburman@nvidia.com>
Wed, 14 Feb 2018 10:48:40 +0000 (15:48 +0530)
committerWinnie Hsu <whsu@nvidia.com>
Tue, 3 Apr 2018 17:44:20 +0000 (10:44 -0700)
commit92779c767e5e7c750cdea0c392e3f31befc37921
tree405985c1aafde5cfa563fdf8aa3a214fa3adfc4a
parentaba332e1dc32edfed73448364f2a88457738a270
drivers: speculative load before bound-check

Data can be speculatively loaded from memory and stay in cache even
when bound check fails. This can lead to unintended information
disclosure via side-channel analysis.

To mitigate this problem, insert speculation barrier.

Bug 1964290
CVE-2017-5753

Change-Id: I7382dbcc6e9f352fafd457301beafe753925f3c4
Signed-off-by: Hien Goi <hgoi@nvidia.com>
Signed-off-by: James Huang <jamehuang@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1650791
Signed-off-by: Jeetesh Burman <jburman@nvidia.com>
(cherry picked from commit 5cabd53985a30aa818896abdb64564a74c09ab9c)
Reviewed-on: https://git-master.nvidia.com/r/1660772
GVS: Gerrit_Virtual_Submit
Reviewed-by: Bibek Basu <bbasu@nvidia.com>
drivers/media/i2c/ad9389b.c
drivers/media/i2c/adv7604.c
drivers/media/i2c/ov7670.c
drivers/media/i2c/ov9650.c
drivers/media/i2c/s5c73m3/s5c73m3-core.c
drivers/media/i2c/s5k6aa.c
drivers/media/v4l2-core/videobuf2-core.c