|
|
Log in / Subscribe / Register

grsecurity: Teardown of a Failed Linux LTS Spectre Fix

grsecurity: Teardown of a Failed Linux LTS Spectre Fix

Posted Sep 4, 2019 14:40 UTC (Wed) by ncultra (guest, #121511)
Parent article: grsecurity: Teardown of a Failed Linux LTS Spectre Fix

Wow, the LTS merge https://git.kernel.org/pub/scm/linux/kernel/git/stable/li... is *really* careless and shows an apparent lack of understanding the vulnerability.

to post comments

grsecurity: Teardown of a Failed Linux LTS Spectre Fix

Posted Sep 4, 2019 15:54 UTC (Wed) by leromarinvit (subscriber, #56850) [Link]

Never mind the vulnerability, it should be obvious that assigning to a variable after its only use is probably not what you want. Even if you assumed throwing array_index_nospec() in after the access will magically protect you (not that I think Greg does), assigning to a variable that's never read again should raise suspicions.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds