grsecurity: Teardown of a Failed Linux LTS Spectre Fix
grsecurity: Teardown of a Failed Linux LTS Spectre Fix
Posted Sep 4, 2019 15:54 UTC (Wed) by leromarinvit (subscriber, #56850)In reply to: grsecurity: Teardown of a Failed Linux LTS Spectre Fix by ncultra
Parent article: grsecurity: Teardown of a Failed Linux LTS Spectre Fix
Never mind the vulnerability, it should be obvious that assigning to a variable after its only use is probably not what you want. Even if you assumed throwing array_index_nospec() in after the access will magically protect you (not that I think Greg does), assigning to a variable that's never read again should raise suspicions.
