peter/spectre-meltdown-checker
peter
/
spectre-meltdown-checker
mirror of https://github.com/speed47/spectre-meltdown-checker.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix(retpoline): retpoline-compiler detection 

When kernel is not compiled with retpoline option, doesn't
have the sysfs vulnerability hierarchy and our heuristic to
detect a retpoline-aware compiler didn't match, change result
for retpoline-aware compiler detection from UNKNOWN to NO.
When CONFIG_RETPOLINE is not set, a retpoline-aware compiler
won't produce different asm than a standard one anyway.
This commit is contained in:
Stéphane Lesimple 2018-01-22 10:48:48 +01:00
parent e7aa3b9d16
commit ddc7197b86
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
spectre-meltdown-checker.sh
View File

@ -1131,7 +1131,7 @@ check_variant2()
retpoline_compiler=1
pstatus green YES "kernel reports full retpoline compilation"
else
pstatus yellow UNKNOWN
[ "$retpoline" = 1 ] && pstatus yellow UNKNOWN || pstatus red NO
fi
elif [ -n "$opt_map" ]; then
# look for the symbol
@ -1139,7 +1139,7 @@ check_variant2()
retpoline_compiler=1
pstatus green YES "noretpoline_setup symbol found in System.map"
else
pstatus yellow UNKNOWN
[ "$retpoline" = 1 ] && pstatus yellow UNKNOWN || pstatus red NO
fi
elif [ -n "$vmlinux" ]; then
# look for the symbol
@ -1149,7 +1149,7 @@ check_variant2()
retpoline_compiler=1
pstatus green YES "noretpoline_setup found in vmlinux symbols"
else
pstatus yellow UNKNOWN
[ "$retpoline" = 1 ] && pstatus yellow UNKNOWN || pstatus red NO
fi
elif grep -q noretpoline_setup "$vmlinux"; then
# if we don't have nm, nevermind, the symbol name is long enough to not have
@ -1157,10 +1157,10 @@ check_variant2()
retpoline_compiler=1
pstatus green YES "noretpoline_setup found in vmlinux"
else
pstatus yellow UNKNOWN
[ "$retpoline" = 1 ] && pstatus yellow UNKNOWN || pstatus red NO
fi
else
pstatus yellow UNKNOWN "couldn't find your kernel image or System.map"
[ "$retpoline" = 1 ] && pstatus yellow UNKNOWN "couldn't find your kernel image or System.map" || pstatus red NO
fi
_info_nol "* Retpoline enabled: "