Hi Viresh, On 18/06/2019 11:21, Viresh Kumar wrote: > On 17-06-19, 17:03, Julien Thierry wrote: >> On 14/06/2019 04:07, Viresh Kumar wrote: [...] > I have updated the stable/v4.4.y/spectre branch with all the changes you > suggested and pushed the earlier version to stable/v4.4.y/spectre-v1 branch. > > Will it be possible for you to have a look at stable/v4.4.y/spectre branch to > see if it is okay, so I can send the v2 version ? Don't want to spam list > unnecessary with so many patches :) > I've given a run for your new version and it looks like the BP hardening is not taking place. I believe the culprit is update_cpu_capabilities(), which in 4.4 tests for capability.desc to know where to stop (and requires all valid capabilities to have a description). Since commit 644c2ae19 "arm64: cpufeature: Test 'matches' pointer to find the end of the list", the restriction was lifted. Unfortunately for you, the errata workarounds using BP hardening were introduced after that commit and were not given a description. So they do not get applied and also, in the current state, would prevent following entries in the errata table from getting applied. So either 644c2ae19 needs to be backported, or the workarounds need to be given descriptions. I'll let you know if I find anything else. Cheers, -- Julien Thierry
