Jordy Zomer 5d40f1bdad dma-buf: heaps: Fix potential spectre v1 gadget ... commit 92c4cfaee6872038563c5b6f2e8e613f9d84d47d upstream. It appears like nr could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using array_index_nospec. Signed-off-by: Jordy Zomer <jordy@pwning.systems> Fixes: c02a81fba7 ("dma-buf: Add dma-buf heaps framework") Cc: <stable@vger.kernel.org> # v5.6+ Acked-by: John Stultz <john.stultz@linaro.org> Signed-off-by: Sumit Semwal <sumit.semwal@linaro.org> [sumits: added fixes and cc: stable tags] Link: https://patchwork.freedesktop.org/patch/msgid/20220129150604.3461652-1-jordy@pwning.systems Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-02-08 18:30:36 +01:00
..
heaps
dma-buf.c	dma-buf: WARN on dmabuf release with pending attachments	2021-11-18 14:03:52 +01:00
dma-fence-array.c	dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()	2022-01-27 10:53:43 +01:00
dma-fence-chain.c
dma-fence.c
dma-heap.c	dma-buf: heaps: Fix potential spectre v1 gadget	2022-02-08 18:30:36 +01:00
dma-resv.c
Kconfig	dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER	2021-09-26 14:08:59 +02:00
Makefile
selftest.c
selftest.h
selftests.h
seqno-fence.c
st-dma-fence-chain.c
st-dma-fence.c
sw_sync.c
sync_debug.c
sync_debug.h
sync_file.c	dma-buf/sync_file: Don't leak fences on merge failure	2021-07-25 14:36:20 +02:00
sync_trace.h
udmabuf.c