KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_get_irq()
authorMark Rutland <mark.rutland@arm.com>
Wed, 25 Apr 2018 16:13:41 +0000 (17:13 +0100)
committerWill Deacon <will.deacon@arm.com>
Thu, 26 Apr 2018 16:02:37 +0000 (17:02 +0100)
commit41b87599c74300027f305d7b34368ec558978ff2
tree9d2911554c552c48dc3b764708aa7d96bbe6f348
parent19791a7ca674fb3009bb068260e852a2f05b605c
KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_get_irq()

It's possible for userspace to control intid. Sanitize intid when using
it as an array index.

At the same time, sort the includes when adding <linux/nospec.h>.

Found by smatch.

Signed-off-by: Mark Rutland <mark.rutland@arm.com>
Acked-by: Christoffer Dall <christoffer.dall@arm.com>
Acked-by: Marc Zyngier <marc.zyngier@arm.com>
Cc: kvmarm@lists.cs.columbia.edu
Signed-off-by: Will Deacon <will.deacon@arm.com>
virt/kvm/arm/vgic/vgic.c