host1x: prevent speculative load related leak
authorJeetesh Burman <jburman@nvidia.com>
Thu, 19 Apr 2018 15:57:20 +0000 (20:57 +0530)
committerWinnie Hsu <whsu@nvidia.com>
Sun, 29 Apr 2018 06:31:29 +0000 (23:31 -0700)
commitdb28d5d9c87a31dd53716ab2bad7a1571212f7e8
tree07b12e6020b84c1db10c42004a7eccc769aa8b3e
parent0eb5e1ea3339a378f8150cdf9592ece4193f3850
host1x: prevent speculative load related leak

Data can be speculatively loaded from memory and stay in cache even
when bound check fails. This can lead to unintended information
disclosure via side-channel analysis.

To mitigate this problem, insert speculation barrier.

bug 2039126
CVE-2017-5753

Change-Id: Ifc618c00cee497e6d84cac01a9b73fcecbe8f260
Signed-off-by: David Gilhooley <dgilhooley@nvidia.com>
Signed-off-by: James Huang <jamehuang@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1650036
(cherry picked from commit 164f8684deb5b15a53c60a60c7d9b8e3bf5af5be)
Signed-off-by: Jeetesh Burman <jburman@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1682714
Signed-off-by: Jeetesh Burman <jburman@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1698611
GVS: Gerrit_Virtual_Submit
Reviewed-by: Bibek Basu <bbasu@nvidia.com>
Tested-by: Bibek Basu <bbasu@nvidia.com>
drivers/video/tegra/host/host1x/host1x.c