5 ms·
A really simple test you can compile with cygwin - if it doesn't crash, the bug is present: #include <stdio.h> int main() { volatile unsigne
by caf 9y ago
A really simple test you can compile with cygwin - if it doesn't crash, the bug is present:
#include <stdio.h>
int main()
{
volatile unsigned long *ptr = (volatile unsigned long *)0xFFFFF6FB7DBED000;
printf("%lx\n", *ptr);
return 0;
}
- testplzignore 9y agoI tested this on a Win7 x64 system with the 2018-01 (KB4056897) and 2018-02 (KB4074587) patches. It segfaulted. Hmmm.
- testplzignore 9y agoAhh, I was using a 32-bit gcc. 64-bit gcc shows it :) $ x86_64-w64-mingw32-gcc meltdown.c -o meltdown.exe $ ./meltdown.exe 1371183207
- BrianG61UK 9y agoBut can you find a March patch that makes the correct 64 bit version segfault? I can't :-(
- keir-rex 9y agoGrammar police warning: The comma in “if it doesn’t crash, the bug is present” actually makes the intention more difficult to understand.
- johnday 9y agoHow?
- kazinator 9y agoThe comma placement "if clause1, clause2" is extremely common. In the above sentence, there is no other place it can go, other than nowhere at all. "if, it doesn't crash ..." nope "if it, doesn't ..." nope "if it doesn't, crash ... " nope "if it doesn't crash, the " yep! "if it doesn't crash the, bug ..." nope "if it doesn't crash the bug, is ..." nope "if it doesn't crash the bug is, present" nope. When it is present, it does help to separate the if and then, particularly in the absence of the word "then". Without the comma, the prefix "if it doesn't crash the bug" can be scanned as a viable clause, only to find that the suffix becomes a fragment.
- CiPHPerCoder 9y ago"If x, y" is a shorthand for "If x then y" in spoken language.
- caseymarquis 9y agoThat's the grammatically correct place to put the comma. Fairly sure you're actually grammatically required to have a comma there.
- mgerdts 9y agoI seem to be unable to find a patch that will make it so that this doesn't run. Windows Update says that I have all required patches. I first tried KB4088875. That didn't cause this program to fail. Then I tried "2018-03 Preview of Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4088881)", which was only a recommended update. That didn't help either.
- mysterypie 9y agoSame for me. I tested a Windows 7 x64 system which has all security patches, but caf's "really simple test" above still runs, which seems to indicate that the bug still exists. Same as you, I applied KB4088881, which was the only pending update, but it made no difference. Also, I tried the command from the orginal article: pcileech.exe dump -out memorydump.raw -device totalmeltdown -v -force This creates 5GB file which does look like a raw memory dump. I'm not sure how to interpret this; I don't know what the behavior should be with or without the bug.
- BrianG61UK 9y agoSame here. I'm worried.
- BrianG61UK 9y agoSo there is no patch that fixes it?
- BrianG61UK 9y agoI finally found the fix. It's KB4100480. It makes the little test crash as it should.
- mgerdts 9y agoIn the off chance that anyone stumbles across this in the future, KB100480 fixes this. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-1038 https://portal.msrc.microsoft.com/en-us/security-guidance/ad... CVSS 3.0 base score of 7.8.
- zalooopa 9y ago123123123
- BrianG61UK 9y agoHello? Why no more comments? What's going on?