summaryrefslogtreecommitdiff
path: root/sys/dev/raidframe
diff options
context:
space:
mode:
authorbouyer <bouyer@NetBSD.org>2016-01-06 15:28:40 +0000
committerbouyer <bouyer@NetBSD.org>2016-01-06 15:28:40 +0000
commitb3f7d51ecdf86d8dc14f34bd092893a9523e9185 (patch)
treef4082018570d2e6a50d4cb95599a939ae3d7b75f /sys/dev/raidframe
parent5e50d77e89a9c9be85ba3ba070a2412374454ce0 (diff)
Apply patch from xsa155: make sure that the backend won't read parts of the
request again (possibly because of compiler optimisations), by using copies and barrier. From XSA155: The compiler can emit optimizations in the PV backend drivers which can lead to double fetch vulnerabilities. Specifically the shared memory between the frontend and backend can be fetched twice (during which time the frontend can alter the contents) possibly leading to arbitrary code execution in backend.
Diffstat (limited to 'sys/dev/raidframe')
0 files changed, 0 insertions, 0 deletions