Messages in this thread | | | From | Denis Vlasenko <> | Subject | Re: ESP corruption bug - what CPUs are affected? | Date | Tue, 21 Sep 2004 14:43:37 +0300 |
| |
On Tuesday 21 September 2004 14:19, Pavel Machek wrote: > Hi! > > > >for subsequent push/pop/call/ret operations. > > >But if code uses full ESP, thinking that upper 16 bits are zero, > > >it will crash badly. Correct me if I'm wrong. > > > > That's correct. But you should note that the > > program not just "thinks" that the upper 16 bits > > are zero. It writes zero there itself, and a few > > instructions later - oops, it is no longer zero... > > Hmm, perhaps this can also be viewed as a "information leak"? Program > running under dosemu is not expected to know high bits of kernel > %esp...
Yes.
I must admit that Stas was right and I was wrong. This is a 386 CPU bug.
Since then it seems to be codified in i86 architecture and duplicated in all successors. Incredible... :( -- vda
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |