26 ms·

Can this be exploited for malicious code?

• userbinator 9y ago
  It's "unpredictable" what happens, so I think the best you're going to do is a DoS. I.e. if you could get the JS JIT in a browser to generate code like this and execute it repeatedly, you could crash a machine just by visiting a site.
  • zurn 9y ago
    In software systems you can nudge many similar situations to give you control over what badness happens when you drive the system off the rails of the invariants. No reason why things anogous to nop sleds, heap spraying etc would not be applicable here.
  • qb45 9y ago
    It also is "unpredictable" what happens when you overrun a stack frame. There is zero guarantee that the infamous Sufficiently Sophisticated Attacker couldn't predict it. Hardware is largely deterministic, even when it doesn't behave in the documented way. I wouldn't interpret this as literally unpredictable, it's just a generic slogan they always use in their errata. And they aren't going to say anything more for obvious reasons. Patch this damn microcode.