CMOVE regression - Githubissues

vusec / inspectre-gadget

InSpectre Gadget: in-depth inspection and exploitability analysis of Spectre disclosure gadgets

https://vusec.github.io/inspectre-gadget/

Apache License 2.0

37 stars 3 forks source link

CMOVE regression #2

Closed AlviseDeFaveri closed 6 months ago

AlviseDeFaveri commented 8 months ago

Splitting the state on sign-extentions uses the same code that was used initially only for CMOVE splitting. This causes the reasoner to mark as "secret-dependent CMOVEs" also simple sign-extentions of the secret.

Fix:

[ ] Split handling of sign-extentions and CMOVEs in the scanner
[ ] Check only CMOVEs in BranchAnalysis