2 ms·
It is my understanding that you can make that window very long by having the mis-speculated branch depend on a value that has to be loaded from main memory.
by caf 8y ago
It is my understanding that you can make that window very long by having the mis-speculated branch depend on a value that has to be loaded from main memory.
- cperciva 8y agoHmm, good point. Yes, that would probably make this much easier to exploit. Unless the CPU does a partial pipeline flush upon realizing that there would be a trap. I don't know -- do Intel CPUs check for exceptions in order?
- caf 8y agoWell, they don't for #PF at least, because that's how Meltdown works - I'm not sure if it works differently for #NM though.