ufrisk / pcileech

Direct Memory Access (DMA) Attack Software
GNU Affero General Public License v3.0
4.87k stars 718 forks source link

Can't read memory with thunderbolt(USB-C port)! #87

Closed cofarmer closed 5 years ago

cofarmer commented 5 years ago

Can't read memory with thunderbolt 3(Type-C port), and the target OS is Windows 7。

After run pcileech testmemread -min 0x1000, the output is: Memory Test Read: starting, reading 1000 times from address: 0x00001000 Memory Test Read: Failed. DMA failed / data changed by target computer / memory corruption. Read: 0. Run: 0. Offset: 0x000

cofarmer commented 5 years ago

When set the -min as 0x1000, failed always. When set the -min as 0x100000 or 0x10000000 ...., it succeed. And if failed once during reading memory, failed always follow.

ufrisk commented 5 years ago

By the looks of it address 0x100000 is readable on your system, but not address 0x1000 for some reason related to your target system.

When the USB3380 encounters unreadable memory it most often freezes until power cycled unfortunately.

This is a particularity with your target system and the USB3380 hardware. Unfortunately I'm not able to fix this in software. It's just how things are.

cofarmer commented 5 years ago

Not USB3380, what i used was SP605+FT601 board.