"New ISA Prefix Fusion"

By: anon2 (anon.delete@this.anon.com), August 17, 2020 8:24 pm
Room: Moderated Discussions
Anon3 (anon3.delete@this.anon3.invalid) on August 17, 2020 5:34 pm wrote:
> Maynard Handley (name99.delete@this.name99.org) on August 17, 2020 4:34 pm wrote:
> > You are suggesting that jumping into the middle of a paid may be a security hole.
>
> I know it's a security hole. Both of the CFI mechanisms I mentioned bear more than a passing resemblance
> to a 2015 NSA paper called 'Hardware Control Flow Integrity (CFI) for an IT Ecosystem' I can't
> find the text online currently but I remember that it claimed a 70% reduction in gadgets in GLIBC
> by application of their proposal. I would not be at all surprised if the NSA strongly suggested
> to various companies that they should adopt something similar in to their ISAs.
>
> Obviously ARMv8 is fixed width so you don't have the jumping in to instructions
> issue but gadgets based on jumping to points which were not branch targets in the
> compiler intended control flow still exist, there are just fewer of them.
>
> > on the details of exactly how these pair instructions are implemented.
>
> It does not matter what the internal implementation is.

It absolutely does.

> It's a prefix opcode felling
> you to to decode the next opcode differently. Therefore there are now two different
> interpretations to the same opcode. This increases the gadget space.

No, not if you are prohibited from jumping into the middle of an instruction.

This can be done architecturally, by marking the suffix as such. Or micro-architecturally by pre-decoding and marking instruction boundaries, which is absolutely possible if you have alignment restrictions on prefix instruction crossings.
< Previous Post in ThreadNext Post in Thread >
TopicPosted ByDate
IBM introduces POWER10Crystal S. Diamond2020/08/16 09:20 PM
  "New ISA Prefix Fusion"QAnon2020/08/16 10:21 PM
    "New ISA Prefix Fusion"Anon32020/08/17 05:59 AM
      "New ISA Prefix Fusion"Kevin G2020/08/17 09:51 AM
        "New ISA Prefix Fusion"Maynard Handley2020/08/17 10:51 AM
          "New ISA Prefix Fusion"Anon32020/08/17 03:10 PM
            "New ISA Prefix Fusion"Maynard Handley2020/08/17 03:34 PM
              "New ISA Prefix Fusion"Anon32020/08/17 04:34 PM
                "New ISA Prefix Fusion"Adrian2020/08/17 05:39 PM
                "New ISA Prefix Fusion"anon22020/08/17 08:24 PM
                  "New ISA Prefix Fusion"Doug S2020/08/17 08:58 PM
                    "New ISA Prefix Fusion"hobold2020/08/18 12:47 AM
                    "New ISA Prefix Fusion"Michael S2020/08/18 03:48 AM
                      "New ISA Prefix Fusion"hobold2020/08/18 10:58 AM
                        "New ISA Prefix Fusion"dmcq2020/08/18 12:00 PM
                          "New ISA Prefix Fusion"Michael S2020/08/18 12:48 PM
                            "New ISA Prefix Fusion"hobold2020/08/18 01:29 PM
                            "New ISA Prefix Fusion"Maynard Handley2020/08/18 02:46 PM
                          "New ISA Prefix Fusion"Maynard Handley2020/08/18 02:42 PM
                            "New ISA Prefix Fusion"anon22020/08/18 06:04 PM
                              "New ISA Prefix Fusion"Maynard Handley2020/08/18 08:17 PM
                                "New ISA Prefix Fusion"dmcq2020/08/19 03:08 AM
                                  "New ISA Prefix Fusion"Maynard Handley2020/08/19 09:02 AM
                                    "New ISA Prefix Fusion"dmcq2020/08/19 10:08 AM
                                      "New ISA Prefix Fusion"Maynard Handley2020/08/19 11:05 AM
                                        "New ISA Prefix Fusion"dmcq2020/08/19 01:14 PM
                                          "New ISA Prefix Fusion"Maynard Handley2020/08/19 01:44 PM
  IBM introduces POWER10Thu2020/08/16 10:56 PM
    IBM introduces POWER10Michael S2020/08/17 01:12 AM
      IBM introduces POWER10Thu2020/08/17 02:27 AM
        IBM introduces POWER10TransientStudent2020/08/17 03:23 AM
          IBM introduces POWER10Rayla2020/08/17 03:29 AM
          IBM introduces POWER10Maynard Handley2020/08/17 09:44 AM
            IBM introduces POWER10Kevin G2020/08/17 09:57 AM
        IBM introduces POWER10Rayla2020/08/17 03:26 AM
          IBM introduces POWER10Thu2020/08/17 04:00 PM
  Matrix Math AcceleratorAdrian2020/08/17 12:01 AM
    Matrix Math AcceleratorMichael S2020/08/17 01:32 AM
      Matrix Math AcceleratorAdrian2020/08/17 01:46 AM
      Matrix Math Acceleratorj2020/08/18 01:32 AM
Reply to this Topic
Name:
Email:
Topic:
Body: No Text
How do you spell avocado?