Mark Rutland c1e2aee995 arm64: fix possible spectre-v1 write in ptrace_hbp_set_event() ...

[ Upstream commit 14d6e289a8 ]

It's possible for userspace to control idx. Sanitize idx when using it
as an array index, to inhibit the potential spectre-v1 write gadget.

Found by smatch.

Signed-off-by: Mark Rutland <mark.rutland@arm.com>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Will Deacon <will.deacon@arm.com>
Signed-off-by: Will Deacon <will.deacon@arm.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-09-26 08:38:03 +02:00

..

alpha

sys: don't hold uts_sem while accessing userspace memory

2018-09-09 19:56:00 +02:00

arc

ARC: [plat-axs*]: Enable SWAP

2018-09-19 22:43:38 +02:00

arm

ARM: exynos: Clear global variable on init error path

2018-09-26 08:38:02 +02:00

arm64

arm64: fix possible spectre-v1 write in ptrace_hbp_set_event()

2018-09-26 08:38:03 +02:00

blackfin

pinctrl: adi2: Fix Kconfig build problem

2017-12-20 10:10:34 +01:00

c6x

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

cris

bug.h: work around GCC PR82365 in BUG()

2018-05-30 07:52:00 +02:00

frv

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

h8300

h8300: remove extraneous __BIG_ENDIAN definition

2018-03-28 18:24:38 +02:00

hexagon

hexagon: export csum_partial_copy_nocheck

2018-06-21 04:02:52 +09:00

ia64

ia64/err-inject: Use get_user_pages_fast()

2018-05-30 07:52:11 +02:00

m32r

m32r: fix endianness constraints

2018-02-28 10:19:44 +01:00

m68k

m68k: fix "bad page state" oops on ColdFire boot

2018-08-24 13:09:11 +02:00

metag

.gitignore: move *.dtb and *.dtb.S patterns to the top-level .gitignore

2018-02-13 10:19:46 +01:00

microblaze

microblaze: Fix simpleImage format generation

2018-08-03 07:50:40 +02:00

mips

MIPS: jz4740: Bump zload address

2018-09-26 08:38:03 +02:00

mn10300

mn10300/misalignment: Use SIGSEGV SEGV_MAPERR to report a failed user copy

2018-02-16 20:23:11 +01:00

nios2

.gitignore: move *.dtb and *.dtb.S patterns to the top-level .gitignore

2018-02-13 10:19:46 +01:00

openrisc

openrisc: entry: Fix delay slot exception detection

2018-08-24 13:09:11 +02:00

parisc

parisc: Remove unnecessary barriers from spinlock.h

2018-08-24 13:09:22 +02:00

powerpc

powerpc/powernv: opal_put_chars partial write fix

2018-09-26 08:38:03 +02:00

s390

KVM: s390: vsie: copy wrapping keys to right place

2018-09-19 22:43:36 +02:00

score

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

sh

sh: fix build failure for J2 cpu with SMP disabled

2018-06-21 04:02:54 +09:00

sparc

sys: don't hold uts_sem while accessing userspace memory

2018-09-09 19:56:00 +02:00

tile

fcntl: don't cap l_start and l_end values for F_GETLK64 in compat syscall

2017-12-17 15:07:59 +01:00

um

um: Use POSIX ucontext_t instead of struct ucontext

2018-04-24 09:36:33 +02:00

unicore32

kmemcheck: stop using GFP_NOTRACK and SLAB_NOTRACK

2018-02-22 15:42:23 +01:00

x86

x86/mm: Remove in_nmi() warning from vmalloc_fault()

2018-09-19 22:43:42 +02:00

xtensa

xtensa: increase ranges in ___invalidate_{i,d}cache_all

2018-09-09 19:55:59 +02:00

.gitignore

…

Kconfig

mm/tlb, x86/mm: Support invalidating TLB caches for RCU_TABLE_FREE

2018-09-05 09:26:37 +02:00