Gustavo A. R. Silva acf784bd0c net: atm: Fix potential Spectre v1 ... ioc_data.dev_num can be controlled by user-space, hence leading to a potential exploitation of the Spectre variant 1 vulnerability. This issue was detected with the help of Smatch: net/atm/lec.c:702 lec_vcc_attach() warn: potential spectre issue 'dev_lec' Fix this by sanitizing ioc_data.dev_num before using it to index dev_lec. Also, notice that there is another instance in which array dev_lec is being indexed using ioc_data.dev_num at line 705: lec_vcc_added(netdev_priv(dev_lec[ioc_data.dev_num]), Notice that given that speculation windows are large, the policy is to kill the speculation on the first load and not worry if it can be completed with a dependent load/store [1]. [1] https://marc.info/?l=linux-kernel&m=152449131114778&w=2 Cc: stable@vger.kernel.org Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-05-04 12:52:47 -04:00
..
addr.c
addr.h
atm_misc.c
atm_sysfs.c	net: Use octal not symbolic permissions	2018-03-26 12:07:48 -04:00
br2684.c
clip.c	net: Use octal not symbolic permissions	2018-03-26 12:07:48 -04:00
common.c	vfs: do bulk POLL* -> EPOLL* replacement	2018-02-11 14:34:03 -08:00
common.h
ioctl.c
Kconfig
lec.c	net: atm: Fix potential Spectre v1	2018-05-04 12:52:47 -04:00
lec.h
lec_arpc.h
Makefile
mpc.c
mpc.h
mpoa_caches.c
mpoa_caches.h
mpoa_proc.c
pppoatm.c
proc.c	net: Use octal not symbolic permissions	2018-03-26 12:07:48 -04:00
protocols.h
pvc.c	net: make getname() functions return length rather than use int* parameter	2018-02-12 14:15:04 -05:00
raw.c
resources.c
resources.h
signaling.c
signaling.h
svc.c	net: make getname() functions return length rather than use int* parameter	2018-02-12 14:15:04 -05:00