[PATCH] Spectre v2 Vulnerability Mitigations

Nitin Mutkawoa <[email protected]>
Newsgroups gmane.network.stunnel.user
Message-ID <CALxpJy4Wex+-1OV2qBbkBLaA_VWONQT351s8PBATWNf0scm=uA@mail.gmail.com>
Hello

To prevent any leakage (Spectre v2) from a compromised VM on same physical
host, this patch would mitigate the impact.

--- configure.ac.orig    2018-03-04 01:46:55.877067173 +0400
+++ configure.ac    2018-03-04 01:49:26.422625147 +0400
@@ -101,6 +101,11 @@ if test "$GCC" = yes; then
 fi
 AX_APPEND_COMPILE_FLAGS([-D_FORTIFY_SOURCE=2])

+# Spectre v2 mitigations
+AX_APPEND_COMPILE_FLAGS([-mfunction-return=thunk])
+AX_APPEND_COMPILE_FLAGS([-mindirect-branch=thunk])
+
 AC_MSG_NOTICE([**************************************** libtool])
 LT_INIT([disable-static])
 AC_SUBST([LIBTOOL_DEPS])

Kind regards,

Nitin J Mutkawoa
https://tunnelix.com
https://hackers.mu

_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.