host1x: prevent speculative load related leak
authorJames Huang <jamehuang@nvidia.com>
Thu, 1 Feb 2018 03:14:14 +0000 (11:14 +0800)
committerMatthew Pedro <mapedro@nvidia.com>
Tue, 10 Apr 2018 05:09:55 +0000 (22:09 -0700)
commitb346931c1fec76a94f0abf6b26630dde73e2d508
tree8e898caa690ac4602c84eee40588f4c8c415b048
parentc64240b9a268b559e0171fe16a963c890a075429
host1x: prevent speculative load related leak

Data can be speculatively loaded from memory and stay in cache even
when bound check fails. This can lead to unintended information
disclosure via side-channel analysis.

To mitigate this problem, insert speculation barrier.

bug 2039126
CVE-2017-5753

Change-Id: Ifc618c00cee497e6d84cac01a9b73fcecbe8f260
Signed-off-by: David Gilhooley <dgilhooley@nvidia.com>
Signed-off-by: James Huang <jamehuang@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1650036
(cherry picked from commit 164f8684deb5b15a53c60a60c7d9b8e3bf5af5be)
Signed-off-by: Jeetesh Burman <jburman@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1682714
GVS: Gerrit_Virtual_Submit
Reviewed-by: Bibek Basu <bbasu@nvidia.com>
drivers/video/tegra/host/host1x/host1x.c