Fork us on GitHub Follow us on Google+ Follow us on Facebook Follow us on Twitter

Opened 11 days ago

Last modified 11 days ago

#760 accepted defect

vreg's can be modified by an arbitrary thread running on another CPU

Reported by: Jakub Jermář Owned by: Jakub Jermář
Priority: major Milestone: 0.8.0
Component: helenos/kernel/amd64 Version: mainline
Keywords: Cc:
Blocker for: Depends on:
See also:

Description

On amd64 and ia32, vreg_init() creates a user-writable page for each CPU with the intention to offer this page via the FS, resp. GS, register as an array of virtual registers that can be used by uspace to implement eg. TLS. Unfortunately, this page can be accessed and written to also from other CPUs without any limits.

Change History (1)

comment:1 Changed 11 days ago by Jakub Jermář

Owner: set to Jakub Jermář
Status: newaccepted
Note: See TracTickets for help on using tickets.