Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

FPR5 final: Initial Spectre mitigations #459

Closed
classilla opened this issue Jan 4, 2018 · 2 comments
Closed

FPR5 final: Initial Spectre mitigations #459

classilla opened this issue Jan 4, 2018 · 2 comments

Comments

@classilla
Copy link
Owner

classilla commented Jan 4, 2018 •
edited
Loading

See https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/

We can adjust ::RoundTime in dom/base/nsPerformance.cpp to accomplish this, but we need to make sure this gets called by both regular DOM and workers. See https://hg.mozilla.org/mozilla-central/rev/e56bc3c9a172 for the locations.

We don't have, and now probably won't ever implement, SharedArrayBuffer.
@classilla
Copy link
Owner Author

Also see https://hg.mozilla.org/releases/mozilla-release/rev/afa87f9be3a8

@classilla
Copy link
Owner Author

See also #457

@classilla classilla mentioned this issue Jan 14, 2018
Closed
classilla added a commit that referenced this issue Jan 15, 2018
@classilla
#457, #459: M1413741 M1408990 M1418922 M1422389 M1415598 M1423159 M13…
cfdc685 
…99400 M1428589 M1427870 M1425780
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@classilla