[PATCHv4 0/2] tunables for glibc

Florian Weimer fweimer@redhat.com
Wed Sep 7 14:51:00 GMT 2016


On 09/07/2016 04:44 PM, H.J. Lu wrote:

> The whole point of cpu features is it is initialized as early as possible
> so that it can be used for ifunc.  I don't think __init_tunables is suitable
> for ifunc, which doesn't have any security implications on x86.

Disabling CPU features for crypto acceleration may introduce timing 
attacks and information leakage (especially if the fallback 
implementation uses lookup tables).

(It's not relevant for glibc at present, I think.)

Florian



More information about the Libc-alpha mailing list