Meltdown and Spectre mitigations — a February update

It's not just "flag the locations where the access of an array is guarded by a bounds check for that access", that would have an insanely high false positive rate. What is needed is to track inputs to the kernel and find places where they are used (however indirectly) to index an array. If those places have bounds checks they need the Spectre v1 mitigation applied.