088e861edf
As recently Smatch suggested, a few places in ALSA control core codes may expand the array directly from the user-space value with speculation: sound/core/control.c:1003 snd_ctl_elem_lock() warn: potential spectre issue 'kctl->vd' sound/core/control.c:1031 snd_ctl_elem_unlock() warn: potential spectre issue 'kctl->vd' sound/core/control.c:844 snd_ctl_elem_info() warn: potential spectre issue 'kctl->vd' sound/core/control.c:891 snd_ctl_elem_read() warn: potential spectre issue 'kctl->vd' sound/core/control.c:939 snd_ctl_elem_write() warn: potential spectre issue 'kctl->vd' Although all these seem doing only the first load without further reference, we may want to stay in a safer side, so hardening with array_index_nospec() would still make sense. In this patch, we put array_index_nospec() to the common snd_ctl_get_ioff*() helpers instead of each caller. These helpers are also referred from some drivers, too, and basically all usages are to calculate the array index from the user-space value, hence it's better to cover there. BugLink: https://marc.info/?l=linux-kernel&m=152411496503418&w=2 Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Cc: <stable@vger.kernel.org> Signed-off-by: Takashi Iwai <tiwai@suse.de> |
||
---|---|---|
.. | ||
ac97 | ||
ac97_codec.h | ||
aci.h | ||
ad1816a.h | ||
ad1843.h | ||
adau1373.h | ||
aess.h | ||
ak4xxx-adda.h | ||
ak4113.h | ||
ak4114.h | ||
ak4117.h | ||
ak4531_codec.h | ||
ak4641.h | ||
alc5623.h | ||
asequencer.h | ||
asound.h | ||
asoundef.h | ||
compress_driver.h | ||
control.h | ||
core.h | ||
cs35l33.h | ||
cs35l34.h | ||
cs35l35.h | ||
cs42l52.h | ||
cs42l56.h | ||
cs42l73.h | ||
cs4231-regs.h | ||
cs4271.h | ||
cs8403.h | ||
cs8427.h | ||
da7213.h | ||
da7218.h | ||
da7219-aad.h | ||
da7219.h | ||
da9055.h | ||
designware_i2s.h | ||
dmaengine_pcm.h | ||
emu10k1_synth.h | ||
emu10k1.h | ||
emu8000_reg.h | ||
emu8000.h | ||
emux_legacy.h | ||
emux_synth.h | ||
es1688.h | ||
gus.h | ||
hda_chmap.h | ||
hda_hwdep.h | ||
hda_i915.h | ||
hda_register.h | ||
hda_regmap.h | ||
hda_verbs.h | ||
hdaudio_ext.h | ||
hdaudio.h | ||
hdmi-codec.h | ||
hwdep.h | ||
i2c.h | ||
info.h | ||
initval.h | ||
jack.h | ||
l3.h | ||
max9768.h | ||
max98088.h | ||
max98090.h | ||
max98095.h | ||
memalloc.h | ||
minors.h | ||
mixer_oss.h | ||
mpu401.h | ||
omap-hdmi-audio.h | ||
omap-pcm.h | ||
opl3.h | ||
opl4.h | ||
pcm_drm_eld.h | ||
pcm_iec958.h | ||
pcm_oss.h | ||
pcm_params.h | ||
pcm-indirect.h | ||
pcm.h | ||
pt2258.h | ||
pxa2xx-lib.h | ||
rawmidi.h | ||
rt286.h | ||
rt298.h | ||
rt5514.h | ||
rt5640.h | ||
rt5645.h | ||
rt5659.h | ||
rt5660.h | ||
rt5663.h | ||
rt5665.h | ||
rt5670.h | ||
s3c24xx_uda134x.h | ||
sb16_csp.h | ||
sb.h | ||
seq_device.h | ||
seq_kernel.h | ||
seq_midi_emul.h | ||
seq_midi_event.h | ||
seq_oss_legacy.h | ||
seq_oss.h | ||
seq_virmidi.h | ||
sh_dac_audio.h | ||
sh_fsi.h | ||
simple_card_utils.h | ||
simple_card.h | ||
snd_wavefront.h | ||
soc-acpi-intel-match.h | ||
soc-acpi.h | ||
soc-dai.h | ||
soc-dapm.h | ||
soc-dpcm.h | ||
soc-topology.h | ||
soc.h | ||
soundfont.h | ||
spear_dma.h | ||
spear_spdif.h | ||
sta32x.h | ||
sta350.h | ||
tas2552-plat.h | ||
tas5086.h | ||
tea6330t.h | ||
timer.h | ||
tlv320aic3x.h | ||
tlv320aic32x4.h | ||
tlv320dac33-plat.h | ||
tlv.h | ||
tpa6130a2-plat.h | ||
uda134x.h | ||
uda1380.h | ||
util_mem.h | ||
vx_core.h | ||
wavefront.h | ||
wm0010.h | ||
wm1250-ev1.h | ||
wm2000.h | ||
wm2200.h | ||
wm5100.h | ||
wm8903.h | ||
wm8904.h | ||
wm8955.h | ||
wm8960.h | ||
wm8962.h | ||
wm8993.h | ||
wm8996.h | ||
wm9081.h | ||
wm9090.h | ||
wss.h |