News for hackers. Stuff that matters.

A comment on Multiple OS Vendors Release Security Patches After Misinterpreting Intel Docs.

Re:Multiple OS Vendors Release Security Patches After Misint... by darkerside on Thursday May 10, 2018 @08:08AM (#17038114)
I'm sure the initial reaction here is going to be lamentation about the state of documentation. People will correctly point out that, if multiple entities misread the documentation, it just have been unclear. And they are right. But that doesn't make this Intel's fault alone. Clear or unclear, the documentation described behavior that was understood at the Intel organization, and the shipped product worked as described.

Where was the security testing at the OS level? Why can't there be automated test suites that catch unauthorized access issues before ship (if not before merge commit)? If your vendor delivers an insecure product and you don't discover it, how much blame do you share?

[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by sillysaurus3 on Thursday May 10, 2018 @08:22AM (#17038179)
Why can't there be automated test suites that catch unauthorized access issues before ship (if not before merge commit)?

Usually the search space is too large.

[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by rocqua on Thursday May 10, 2018 @09:47AM (#17038777)
Isn't that what fuzzing is for?
[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by hedora on Thursday May 10, 2018 @10:49AM (#17039302)
Concolic testing would probably catch it, but only if the person that implemented the hardware model for the theorem prover understood the Intel documentation, which seems unlikely.

Basic fuzzing probably wouldn’t catch this; as the other comments point out, the search space is probably too large, and the set of vulnerable executions is probably too small for an undirected random search.

[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by amluto on Thursday May 10, 2018 @10:15AM (#17039007)
I’d be truly amazed if a fuzzer could have caught this one. You need to invoke debug syscalls with the right parameters and the do a magic two-to-three instruction sequence.
[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by learningto on Thursday May 10, 2018 @10:20AM (#17039046)
It's what formal verification is for!
[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by simion314 on Thursday May 10, 2018 @09:23AM (#17038582)
If you can't trust the CPU documentation how can you test that addition works? even if you could test all possible combinations of terms to add and verify the results there may be a hidden flag somewhere that when flipped will change how addition works.
[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by Tobba_ on Thursday May 10, 2018 @11:09AM (#17039521)
On that subject, I'm curious whether there is any CPU out there that sets the overflow flag incorrectly when computing (-1) - n when n is the most negative number (which negates to itself, so implementing subtraction by simply negating the RHS and adding will screw up the flags).
[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by Vogtinator on Saturday May 12, 2018 @06:13PM (#17056278)
The ARM ARM documents sub(left, right, no carry) as add(left, ~right, carry set), which is also the most straightforward implementation if you have to account for carry anyway.
[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by throwaway2048 on Thursday May 10, 2018 @08:32AM (#17038223)
Your idea is akin to searching the space of unknown unknowns, By definition someone can not even begin to quantify the space of what you don't know you don't know.
[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by hedora on Thursday May 10, 2018 @11:08AM (#17039513)
This mentality is why I like OpenBSD.

If they can’t sign off on the security/correctness of a pile of code, they delete it, even if it means losing functionality.

In this case, they simply didn’t invoke the incomprehensible instruction of doom.

[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by empath75 on Thursday May 10, 2018 @08:39AM (#17038280)
It’s as simple as determining if a given program will halt.
[ Parent | on HN ]
Re:Multiple OS Vendors Release Security Patches After Misint... by dboreham on Thursday May 10, 2018 @09:03AM (#17038466)
You forgot to include the sarcasm flag. I suppose "tag" these days, right?
[ Parent | on HN ]