4 ms·

Another question is whether it is actually exploitable from OS/i userspace.

• skissane 9y ago
  Well, if you consider PASE lets you run AIX binaries, if it is exploitable on AIX the same exploit would probably work on IBM i. (PASE only supports a subset of AIX system calls though.) Also, if it is exploitable from Java, nowadays the IBM i JVM is J9, almost the same as AIX. (This used to be different – the "Classic JVM" was integrated into the TIMI infrastructure, so quite different from JVMs on other platforms.)
  • carey 9y ago
    I'm more interested in the non-PASE (more accurately, non-Teraspace) situation. The single level store maps every program into the same address space. Will POWER speculatively access another user's data before it discovers that the pointer is invalid or the array index is out of range?
    • justincormack 9y ago
      Yes, it is an interesting case, I hope we get more detail than this paper soon.