Jordy Zomer 92c4cfaee6 dma-buf: heaps: Fix potential spectre v1 gadget ...

It appears like nr could be a Spectre v1 gadget as it's supplied by a
user and used as an array index. Prevent the contents
of kernel memory from being leaked to userspace via speculative
execution by using array_index_nospec.

Signed-off-by: Jordy Zomer <jordy@pwning.systems>
Fixes: c02a81fba7 ("dma-buf: Add dma-buf heaps framework")
Cc: <stable@vger.kernel.org> # v5.6+
Acked-by: John Stultz <john.stultz@linaro.org>
Signed-off-by: Sumit Semwal <sumit.semwal@linaro.org>
 [sumits: added fixes and cc: stable tags]
Link: https://patchwork.freedesktop.org/patch/msgid/20220129150604.3461652-1-jordy@pwning.systems

2022-02-01 13:18:09 +05:30

..

heaps

dma-buf: cma_heap: Fix mutex locking section

2022-01-13 16:35:21 +05:30

dma-buf-sysfs-stats.c

kobject: remove kset from struct kset_uevent_ops callbacks

2021-12-28 11:26:18 +01:00

dma-buf-sysfs-stats.h

dma-buf: Delete the DMA-BUF attachment sysfs statistics

2021-07-20 11:06:59 +02:00

dma-buf.c

Merge drm/drm-next into drm-misc-next

2021-11-18 09:36:39 +01:00

dma-fence-array.c

dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()

2021-11-30 07:46:24 +01:00

dma-fence-chain.c

dma-buf: some dma_fence_chain improvements

2021-06-14 19:33:16 +02:00

dma-fence.c

dma-buf: add dma_fence_describe and dma_resv_describe v2

2021-11-11 09:35:13 +01:00

dma-heap.c

dma-buf: heaps: Fix potential spectre v1 gadget

2022-02-01 13:18:09 +05:30

dma-resv.c

dma-buf: make fence mandatory for dma_resv_add_excl_fence v2

2021-11-30 15:59:33 +01:00

Kconfig

dma-buf: DMABUF_SYSFS_STATS should depend on DMA_SHARED_BUFFER

2021-09-07 12:42:21 +05:30

Makefile

dma-buf: add dma_resv selftest v4

2021-10-22 14:19:51 +02:00

selftest.c

dma-buf: Introduce selftesting framework

2019-08-19 18:01:34 +01:00

selftest.h

dma-buf: Introduce selftesting framework

2019-08-19 18:01:34 +01:00

selftests.h

dma-buf: add dma_resv selftest v4

2021-10-22 14:19:51 +02:00

st-dma-fence-chain.c

dma-buf: add dma_fence_chain_alloc/free v3

2021-06-14 19:38:34 +02:00

st-dma-fence.c

dma-buf: Avoid comma separated statements

2021-02-09 17:14:11 +01:00

st-dma-resv.c

dma-buf: st: fix error handling in test_get_fences()

2021-10-26 13:06:47 +02:00

sw_sync.c

compat_ioctl: move more drivers to compat_ptr_ioctl

2019-10-23 17:23:44 +02:00

sync_debug.c

Merge v5.2-rc5 into drm-next

2019-06-19 12:07:29 +02:00

sync_debug.h

dma-buf: Remove unused sync_dump()

2019-04-23 09:30:07 +01:00

sync_file.c

dma-buf/sync_file: Don't leak fences on merge failure

2021-07-12 13:34:49 +02:00

sync_trace.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udmabuf.c

udmabuf: fix general protection fault in udmabuf_create

2021-08-12 09:27:22 +02:00