3 ms·
Played with it a bit, to me it is really reading data of arbitrary size starting at any given memory address. Usage is ./meltdown [hexadrr] [size] Run.sh is f
by bpizzi 9y ago
Played with it a bit, to me it is really reading data of arbitrary size starting at any given memory address.
Usage is ./meltdown [hexadrr] [size]
Run.sh is first reading the adress where the value of linux_proc_banner is held, with a adequat sed on /proc/kallsyms, then running the meltdown binary to check that this adress has the value stored in /proc/version, which should be the case if the exploit is indeed working (which IS the case with my CPU and current kernel).
Meltdown.c is below 300 lines, the actual exploit being maybe half of that.
From here, it seems to me that you can extrapolate in reading any value anywhere in the memory.