lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1d6e5dee-9c7a-65cb-3b39-d6f3c1f29e9d@citrix.com>
Date:   Mon, 14 Aug 2023 13:54:26 +0100
From:   Andrew.Cooper3@...rix.com
To:     Peter Zijlstra <peterz@...radead.org>, x86@...nel.org
Cc:     linux-kernel@...r.kernel.org, David.Kaplan@....com,
        jpoimboe@...nel.org, gregkh@...uxfoundation.org,
        nik.borisov@...e.com
Subject: Re: [PATCH v2 03/11] objtool/x86: Fix SRSO mess

On 14/08/2023 12:44 pm, Peter Zijlstra wrote:
> <snip>
> +/*
> + * Symbols that are embedded inside other instructions, because sometimes crazy
> + * code exists. These are mostly ignored for validation purposes.

I feel this comment still doesn't get across the sweat and tears
involved with the fixes, so offer this alternative for consideration:

", because sometimes the only thing more crazy than hardware behaviour
is what we have to do in software to mitigate"

~Andrew

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ