3 ms·
I was going to ask if you could then fuzz a physical CPU to find CPU bugs, but sure enough, the paper authors have already been doing that!
by schoen 8y ago
I was going to ask if you could then fuzz a physical CPU to find CPU bugs, but sure enough, the paper authors have already been doing that!
- jchw 8y agoThere was a really good Blackhat talk a year or two ago in a sort of similar vein: they developed an approach to iterate and find undocumented opcodes. https://youtu.be/KrksBdWcZgQ https://youtu.be/KrksBdWcZgQ The software they developed is called Sandsifter.
- xelxebar 8y agoOh yeah. That's Christopher Domas, the same guy that built a functioning compiler that only emits MOV instructions [0] [1]. His other talks are quite interesting, as well! [0]:https://github.com/xoreaxeaxeax/movfuscator https://github.com/xoreaxeaxeax/movfuscator [1]:https://www.youtube.com/watch?v=2VF_wPkiBJY https://www.youtube.com/watch?v=2VF_wPkiBJY