diff options
author | Dianzhang Chen <[email protected]> | 2019-06-25 23:30:17 +0800 |
---|---|---|
committer | Thomas Gleixner <[email protected]> | 2019-06-27 23:48:04 +0200 |
commit | 31a2fbb390fee4231281b939e1979e810f945415 (patch) | |
tree | 8143cc1bccd3a8c1f0243a073e032db825a87b1e /tools/perf/scripts/python/export-to-postgresql.py | |
parent | ab3765a050f7bea942f114d07278e1775e38199b (diff) |
x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
The index to access the threads ptrace_bps is controlled by userspace via
syscall: sys_ptrace(), hence leading to a potential exploitation of the
Spectre variant 1 vulnerability.
The index can be controlled from:
ptrace -> arch_ptrace -> ptrace_get_debugreg.
Fix this by sanitizing the user supplied index before using it access
thread->ptrace_bps.
Signed-off-by: Dianzhang Chen <[email protected]>
Signed-off-by: Thomas Gleixner <[email protected]>
Cc: [email protected]
Cc: [email protected]
Cc: [email protected]
Link: https://lkml.kernel.org/r/[email protected]
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions