diff options
| author |   Hagar Hemdan <hagarhem@amazon.com> | 2024-05-23 08:53:32 +0000 |
|---|---|---|
| committer |   Bartosz Golaszewski <bartosz.golaszewski@linaro.org> | 2024-05-27 16:51:20 +0200 |
| commit | d795848ecce24a75dfd46481aee066ae6fe39775 (patch) | |
| tree | 55a313712dc298e335c10a2ba35f162a0f6e3659 /tools/perf/scripts/python/export-to-sqlite.py | |
| parent | gpio: Remove legacy API documentation (diff) | |
| download | wireguard-linux-d795848ecce24a75dfd46481aee066ae6fe39775.tar.xz wireguard-linux-d795848ecce24a75dfd46481aee066ae6fe39775.zip | |
gpio: prevent potential speculation leaks in gpio_device_get_desc()
Userspace may trigger a speculative read of an address outside the gpio
descriptor array.
Users can do that by calling gpio_ioctl() with an offset out of range.
Offset is copied from user and then used as an array index to get
the gpio descriptor without sanitization in gpio_device_get_desc().
This change ensures that the offset is sanitized by using
array_index_nospec() to mitigate any possibility of speculative
information leaks.
This bug was discovered and resolved using Coverity Static Analysis
Security Testing (SAST) by Synopsys, Inc.
Signed-off-by: Hagar Hemdan <hagarhem@amazon.com>
Link: https://lore.kernel.org/r/20240523085332.1801-1-hagarhem@amazon.com
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions