opal_error_to_human shows how subtle and deep Spectre v1 can go. this one is probably not useful but it shows the evolving power of our Spectre v1 static analysis tool. only 2600+ instances to go through ;).
1
1
7
That's code I maintain. Would you suggest hardening that function in anyway?
1
Replying to @ScottyBauer1
you can always use array_index_nospec yourself but honestly, doing all these changes by hand will never scale and it should be done by the compiler instead (which is where we're going).

Mar 18, 2018 · 9:10 PM UTC
3