dm ioctl: prevent potential spectre v1 gadget
authorJordy Zomer <jordy@jordyzomer.github.io>
Sat, 29 Jan 2022 14:58:39 +0000 (15:58 +0100)
committerMike Snitzer <snitzer@redhat.com>
Tue, 22 Feb 2022 16:04:41 +0000 (11:04 -0500)
commitcd9c88da171a62c4b0f1c70e50c75845969fbc18
treee6af6dfa8a8a35becda7882bb15f6439ef7fab36
parenta8b9d116cda047f38ba29ce26df49c57479ffaa2
dm ioctl: prevent potential spectre v1 gadget

It appears like cmd could be a Spectre v1 gadget as it's supplied by a
user and used as an array index. Prevent the contents of kernel memory
from being leaked to userspace via speculative execution by using
array_index_nospec.

Signed-off-by: Jordy Zomer <jordy@pwning.systems>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
drivers/md/dm-ioctl.c