aio: fix spectre gadget in lookup_ioctx
authorJeff Moyer <jmoyer@redhat.com>
Tue, 11 Dec 2018 17:37:49 +0000 (12:37 -0500)
committerAl Viro <viro@zeniv.linux.org.uk>
Tue, 11 Dec 2018 19:32:14 +0000 (14:32 -0500)
commit0afa99648350dbd6d08ee3efd2376db240a6c458
tree0700011140ed21d2636f3ee0e665d0529e88befb
parent73116df7bb90435ccb2817f44113295240d15034
aio: fix spectre gadget in lookup_ioctx

Matthew pointed out that the ioctx_table is susceptible to spectre v1,
because the index can be controlled by an attacker.  The below patch
should mitigate the attack for all of the aio system calls.

Reported-by: Matthew Wilcox <willy@infradead.org>
Signed-off-by: Jeff Moyer <jmoyer@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/aio.c