Closed Bug 2009237 Opened 10 months ago Closed 8 months ago

Disable spectre mitigations by default

Categories

(Core :: JavaScript Engine, defect, P3)

defect

Tracking

()

RESOLVED FIXED
149 Branch
Tracking Status
firefox-esr115 --- wontfix
firefox-esr140 --- wontfix
firefox147 --- wontfix
firefox148 --- wontfix
firefox149 --- fixed

People

(Reporter: jrmuizel, Assigned: jrmuizel)

References

(Blocks 2 open bugs)

Details

(Keywords: perf-alert, sec-other, Whiteboard: [adv-main149-])

Attachments

(1 external file)

This makes it so the shell has spectre mitigations off by default which
is less suprising given it's our default configuration on desktop.

It also fixes a problem where the behaviour didn't match the help text.
i.e. help says "Whether Spectre mitigations are enabled (default: off, on to enable)"
but spectre mitigations are actually on by default.

XPCJSContext.cpp sets these manually so browser builds are not affected.

Attached file (secure) —

This makes it so the shell has spectre mitigations off by default which
is less suprising given it's our default configuration on desktop.

It also fixes a problem where the behaviour didn't match the help text.
i.e. help says "Whether Spectre mitigations are enabled (default: off, on to enable)"
but spectre mitigations are actually on by default.

XPCJSContext.cpp sets these manually so browser builds are not affected.

Pushed by abutkovits@mozilla.com: https://github.com/mozilla-firefox/firefox/commit/6aba9bef42f3 https://hg.mozilla.org/integration/autoland/rev/4638e157ee0d Revert "Bug 2009237 - Disable spectre mitigations by default r=rhunt,jandem" for causing SM bustages.
Severity: -- → S4
Priority: -- → P3
Depends on: 2010050
Group: javascript-core-security
Keywords: sec-other

Is it safe to land this now?

Attachment #9536460 - Attachment description: Bug 2009237 - Disable spectre mitigations by default → (secure)
Group: javascript-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 8 months ago
Flags: needinfo?(jmuizelaar)
Resolution: --- → FIXED
Target Milestone: --- → 149 Branch

smattering of improvements on shell-only Js benchmarks on Linux

(In reply to Pulsebot from comment #6)

Pushed by jmuizelaar@mozilla.com:
https://github.com/mozilla-firefox/firefox/commit/730da4759675
https://hg.mozilla.org/integration/autoland/rev/b07032c6abae
Disable spectre mitigations by default r=rhunt,jandem

Perfherder has detected a js-bench performance change from push b07032c6abaed15e440945fc7b8d8cc46f1286ca.

No action is required from the author; this comment is provided for informational purposes only.

Improvement Test Platform Options Absolute values [old vs new]
5% ares6-sm linux64-shippable 41.93 ms -> 39.91 ms
5% web-tooling-benchmark-sm linux64-shippable 8.73 score -> 9.13 score

Need Help or Information?

If you have any questions, please reach out to aesanu@mozilla.com. Alternatively, you can find help on Slack by joining #perf-help, and on Matrix you can find help by joining #perftest.

Details of the alert can be found in the alert summary, including links to graphs and comparisons for each of the affected tests.

Keywords: perf-alert
QA Whiteboard: [sec] [qa-triage-done-c150/b149]
Whiteboard: [adv-main149-]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: