5 ms·

note: I don't know linux... Is it possible to get the GPU to copy kernel / system memory to the framebuffer, then read that back with user space app? I.e. can

note: I don't know linux... Is it possible to get the GPU to copy kernel / system memory to the framebuffer, then read that back with user space app? I.e. can we convince the GPU or framebuffer to give us the contents of protected system memory?

mjg59 9y ago
In the absence of an IOMMU configured to block GPU accesses to non-GPU memory regions, yes - however, drivers should block any request to do so.
vardump 9y ago
Well, if you're root... and configure IOMMU in such a way, etc. Otherwise, it simply depends on system hardware architecture and drivers. If the GPU is in a position to read and write physical memory (bus master DMA), and there's no hardware level protection like IOMMU or it's not properly configured, operating system has very little say in the matter, be it Linux or anything else.
Relys 9y ago
On the Nintendo Wii U we were able to do this. Check out "GX2 unchecked memory read/write": http://wiiubrew.org/wiki/Wii_U_System_Flaws http://wiiubrew.org/wiki/Wii_U_System_Flaws. Same issue with "gspwn" on the Nintendo 3DS: https://www.3dbrew.org/wiki/3DS_System_Flaws https://www.3dbrew.org/wiki/3DS_System_Flaws