On 04/29/2015 03:08 PM, mancha security wrote: ...
By the way, has anyone been able to verify that __memory_barrier provides DSE protection under various optimizations? Unfortunately, I don't have ready access to ICC at the moment or I'd test it myself.
Never used icc, but it looks like it's free for open source projects; I can give it a try, but in case you're faster than I am, feel free to post results here. From what I see based on the code, i.e. after that buggy cleanup commit ... commit 73679e50820123ebdedc67ebcda4562d1d6e4aba Author: Pranith Kumar <bobby.prani@xxxxxxxxx> Date: Tue Apr 15 12:05:22 2014 -0400 compiler-intel.h: Remove duplicate definition barrier is already defined as __memory_barrier in compiler.h Remove this unnecessary redefinition. Signed-off-by: Pranith Kumar <bobby.prani@xxxxxxxxx> Link: http://lkml.kernel.org/r/CAJhHMCAnYPy0%2BqD-1KBnJPLt3XgAjdR12j%2BySSnPgmZcpbE7HQ@xxxxxxxxxxxxxx Signed-off-by: H. Peter Anvin <hpa@xxxxxxxxxxxxxxx> ... it looks like it's currently using the _same_ gcc inline asm for the barrier on icc instead of what that commit intended to do. So funny enough, we don't actually use __memory_barrier() at the moment. ;) Nonetheless, having a look might be good. -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html