News for hackers. Stuff that matters.
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by caf on Tuesday March 27, 2018 @06:58PM (#16693599)
A really simple test you can compile with cygwin - if it doesn't crash, the bug is present:

  #include <stdio.h>
  
  int main()
  {
          volatile unsigned long *ptr = (volatile unsigned long *)0xFFFFF6FB7DBED000;
  
          printf("%lx\n", *ptr);
          return 0;
  }
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by mgerdts on Wednesday March 28, 2018 @01:22AM (#16695529)
I seem to be unable to find a patch that will make it so that this doesn't run. Windows Update says that I have all required patches. I first tried KB4088875. That didn't cause this program to fail. Then I tried "2018-03 Preview of Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4088881)", which was only a recommended update. That didn't help either.
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by mysterypie on Wednesday March 28, 2018 @01:58AM (#16695700)
Same for me. I tested a Windows 7 x64 system which has all security patches, but caf's "really simple test" above still runs, which seems to indicate that the bug still exists. Same as you, I applied KB4088881, which was the only pending update, but it made no difference.

Also, I tried the command from the orginal article:

pcileech.exe dump -out memorydump.raw -device totalmeltdown -v -force

This creates 5GB file which does look like a raw memory dump. I'm not sure how to interpret this; I don't know what the behavior should be with or without the bug.

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by mgerdts on Thursday April 05, 2018 @11:33PM (#16770700)
In the off chance that anyone stumbles across this in the future, KB100480 fixes this.

https://portal.msrc.microsoft.com/en-us/security-guidance/ad...

CVSS 3.0 base score of 7.8.

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Friday March 30, 2018 @12:48PM (#16717685)
I finally found the fix. It's KB4100480. It makes the little test crash as it should.
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Thursday March 29, 2018 @08:48PM (#16712671)
So there is no patch that fixes it?
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Wednesday March 28, 2018 @11:50PM (#16704384)
Same here.

I'm worried.

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by testplzignore on Tuesday March 27, 2018 @07:56PM (#16693905)
I tested this on a Win7 x64 system with the 2018-01 (KB4056897) and 2018-02 (KB4074587) patches. It segfaulted. Hmmm.
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by testplzignore on Tuesday March 27, 2018 @08:16PM (#16694026)
Ahh, I was using a 32-bit gcc. 64-bit gcc shows it :)

  $ x86_64-w64-mingw32-gcc meltdown.c -o meltdown.exe
  $ ./meltdown.exe
  1371183207
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Wednesday March 28, 2018 @11:50PM (#16704382)
But can you find a March patch that makes the correct 64 bit version segfault? I can't :-(
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by zalooopa on Wednesday March 28, 2018 @11:45AM (#16698621)
123123123
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by keir-rex on Tuesday March 27, 2018 @08:02PM (#16693947)
Grammar police warning: The comma in “if it doesn’t crash, the bug is present” actually makes the intention more difficult to understand.
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by kazinator on Tuesday March 27, 2018 @08:16PM (#16694025)
The comma placement "if clause1, clause2" is extremely common. In the above sentence, there is no other place it can go, other than nowhere at all.

"if, it doesn't crash ..." nope

"if it, doesn't ..." nope

"if it doesn't, crash ... " nope

"if it doesn't crash, the " yep!

"if it doesn't crash the, bug ..." nope

"if it doesn't crash the bug, is ..." nope

"if it doesn't crash the bug is, present" nope.

When it is present, it does help to separate the if and then, particularly in the absence of the word "then".

Without the comma, the prefix "if it doesn't crash the bug" can be scanned as a viable clause, only to find that the suffix becomes a fragment.

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by sova on Tuesday March 27, 2018 @08:23PM (#16694066)
You brute-forced comma placement. I tip, to you, my hat.
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by ralphie02 on Tuesday March 27, 2018 @09:11PM (#16694328)
Thank you for this and everyone who has downvoted an incorrect and misleading statement
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by CiPHPerCoder on Tuesday March 27, 2018 @08:43PM (#16694157)
"If x, y" is a shorthand for "If x then y" in spoken language.
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by caseymarquis on Tuesday March 27, 2018 @11:37PM (#16695060)
That's the grammatically correct place to put the comma. Fairly sure you're actually grammatically required to have a comma there.
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by johnday on Tuesday March 27, 2018 @08:10PM (#16693990)
How?