Am 02.04.26 um 08:32 schrieb Greg Kroah-Hartman:
On Thu, Apr 02, 2026 at 08:20:27AM +0200, Thomas Zimmermann wrote:
Am 24.03.26 um 17:42 schrieb Greg Kroah-Hartman:
The drm compat ioctl path takes a user controlled pointer, and then
dereferences it into a table of function pointers, the signature method
of spectre problems. Fix this up by calling array_index_nospec() on the
index to the function pointer list.
Cc: Maarten Lankhorst <[email protected]>
Cc: Maxime Ripard <[email protected]>
Cc: Thomas Zimmermann <[email protected]>
Cc: David Airlie <[email protected]>
Cc: Simona Vetter <[email protected]>
Cc: stable <[email protected]>
Assisted-by: gkh_clanker_2000
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Also acked by Sima and Maxime via IRC
https://people.freedesktop.org/~cbrill/dri-log/?channel=dri-devel&highlight_names=&date=2026-04-01&show_html=true
Acked-by: Maxime Ripard <[email protected]>
Reviewed-by: Simona Vetter <[email protected]>
Great, thanks, I'm assuming some drm developer can pick this up then?
Already done. It should show up in the next -rc
greg k-h
--
--
Thomas Zimmermann
Graphics Driver Developer
SUSE Software Solutions Germany GmbH
Frankenstr. 146, 90461 Nürnberg, Germany, www.suse.com
GF: Jochen Jaser, Andrew McDonald, Werner Knoblich, (HRB 36809, AG Nürnberg)
