Closed Bug 1437130 Opened 7 years ago Closed 2 years ago

Add retpoline macro

Categories

(Core :: JavaScript Engine, enhancement, P2)

Product:
Core
Component:
JavaScript Engine
Type:
enhancement

Tracking

()

Status:
RESOLVED WONTFIX
Tracking Flags:
Tracking Status
firefox60 --- affected

People

(Reporter: luke, Unassigned)

References

Details

This would be useful for indirect calls where the callee makes an unchecked assumption about its arguments in a way that can Spectre-leak a value. A first step would be to get a good portable SPECTRE_RETPOLINE(func, args...) macro that we could easily sprinkle at such callsites. Good candidates would be jumps into type-specialized JIT code.
status-firefox60: --- → affected
Priority: -- → P1
Priority: P1 → P2
Severity: normal → S3

WONTFIX since we're very unlikely to need this now that we're shipping Fission.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.