search

hex-five / multizone-sdk

MultiZone® Security TEE is the quick and safe way to add security and separation to any RISC-V processors. The RISC-V standard ISA doesn't define TrustZone-like primitives to provide hardware separation. To shield critical functionality from untrusted third-party components, MultiZone provides hardware-enforced, software-defined separation of multi
https://hex-five.com/multizone-security-tee-riscv/
Other
82 stars 24 forks source link

BUG: Incorrect irq routing of plic sources greater than 31 breaks zone separation and could result in DOS. #63

Closed Hex-Five-Labs closed 10 months ago

Hex-Five-Labs commented 10 months ago

PLIC interrupt for sources > 31 are always routed to zone1 despite being mapped to other zones.
This is likely to result in a denial of service for both zone1 and the zone mapped to the plic source > 31.

Hex-Five-Labs commented 10 months ago

Fixed in commit 196ff0