Stéphane Lesimple
|
6a61df200e
|
update: fwdb to v266+i20230512
|
4 weeks ago |
ShadowCurse
|
e4b313fe79
|
feat: arm: add Neoverse-V1
|
2 months ago |
|
Stéphane Lesimple
|
a2843575be
|
fix: docker: adding missing utils (fixes #433)
|
3 months ago |
Hilton Chain
|
60c71ccb7a
|
Add support for Guix System kernel.
|
3 months ago |
|
Stéphane Lesimple
|
48abeb5950
|
fix: bad exitcode with --update-fwdb due to trap exit
|
3 months ago |
|
Stéphane Lesimple
|
3c988cc73a
|
fix: rewrite SQL to be sqlite3 >= 3.41 compatible
closes #443
|
3 months ago |
glitsj16
|
bea5cfc3b8
|
Fix typo: /devnull file created in filesystem
|
3 months ago |
|
Stéphane Lesimple
|
b68ebe67f2
|
fix: fwdb: ignore MCEdb versions where an official Intel version exists (fixes #430)
|
1 year ago |
|
Stéphane Lesimple
|
a6c943d38f
|
release v0.45
|
1 year ago |
|
Stéphane Lesimple
|
dd162301ff
|
chore: update fwdb to v222+i20220208
|
1 year ago |
|
Stéphane Lesimple
|
5f6471d9a4
|
feat: set default TMPDIR for Android (#415)
|
1 year ago |
|
Stéphane Lesimple
|
2a5b965b98
|
feat: add --allow-msr-write, no longer write by default (#385), detect when writing is denied
|
1 year ago |
|
Stéphane Lesimple
|
ee266d43b7
|
chore: fix indentation
|
1 year ago |
|
Stéphane Lesimple
|
b61baa90df
|
feat: bsd: for unimplemented CVEs, at least report when CPU is not affected
|
1 year ago |
|
Stéphane Lesimple
|
a98d92f8bc
|
chore: wording: model not vulnerable -> model not affected
|
1 year ago |
|
Stéphane Lesimple
|
b7c8c4115a
|
feat: implement detection for MCEPSC under BSD
|
1 year ago |
|
Stéphane Lesimple
|
4e7c52767d
|
chore: update Intel Family 6 models
|
1 year ago |
|
Stéphane Lesimple
|
8473d9ba6b
|
chore: ensure vars are set before being dereferenced (set -u compat)
|
1 year ago |
|
Stéphane Lesimple
|
0af4830224
|
fix: is_ucode_blacklisted: fix some model names
|
1 year ago |
|
Stéphane Lesimple
|
81a4329d71
|
feat: add --cpu, apply changes to (read|write)_msr, update fwdb to v221+i20220208
|
1 year ago |
|
Stéphane Lesimple
|
3679776f3c
|
chore: only attempt to load msr and cpuid module once
|
1 year ago |
|
Stéphane Lesimple
|
ba131fcd2f
|
chore: read_cpuid: use named constants
|
1 year ago |
|
Stéphane Lesimple
|
ae6bc31c2c
|
feat: hw check: add IPRED, RRSBA, BHI features check
|
1 year ago |
|
Stéphane Lesimple
|
6d7a6b3666
|
feat: add subleaf != 0 support for read_cpuid
|
1 year ago |
|
Stéphane Lesimple
|
16f2160be5
|
chore: fwdb: update to v220+i20220208
|
1 year ago |
Aditya-Tolikar
|
7cad9301b3
|
typo
'A' is more 'X' *than 'B'.
Previously: 'A' is more 'X' that 'B'.
|
1 year ago |
|
Stéphane Lesimple
|
580549812a
|
fix: retpoline: detection on 5.15.28+ (#420)
|
1 year ago |
|
Stéphane Lesimple
|
a485c7882a
|
doc: readme: make the FAQ entry more visible
|
2 years ago |
|
Stéphane Lesimple
|
7d13f7a0ef
|
doc: add an FAQ entry about CVE support
|
2 years ago |
|
Stéphane Lesimple
|
226b2375ab
|
chore: speculative execution -> transient execution
|
2 years ago |
|
Stéphane Lesimple
|
052a3e66d1
|
doc: more FAQ and README
|
2 years ago |
|
Stéphane Lesimple
|
05d862709d
|
fix: has_vmm false positive with pcp
Fix by matching the full procname with pgrep (-x),
so that the 'pmdakvm' process doesn't match.
Closes #394
|
2 years ago |
|
Stéphane Lesimple
|
3846913899
|
fix: refuse to run under MacOS and ESXi
|
2 years ago |
|
Stéphane Lesimple
|
a87ace1f98
|
doc: add an FAQ.md and update the README.md accordingly
|
2 years ago |
|
Stéphane Lesimple
|
0ba71a443e
|
fix: mcedb: v191 changed the MCE table format
Also update the builtin db to v191+i20210217
Closes #400
|
2 years ago |
|
Stéphane Lesimple
|
3a486e9985
|
arm64: variant 4: detect ssbd mitigation from kernel img, system.map or kconfig
|
2 years ago |
|
Stéphane Lesimple
|
23564cda5d
|
fix: variant4: added case where prctl ssbd status is tagged as 'unknown'
|
2 years ago |
|
Stéphane Lesimple
|
0ea21d09bd
|
fix: extract_kernel: don't overwrite kernel_err if already set
Fixes #395
|
2 years ago |
|
Stéphane Lesimple
|
08e30e156d
|
chore: readme: framapic is gone, host the screenshots on GitHub
|
2 years ago |
Zhiyuan Dai
|
6d35e780f4
|
arm64: phytium: Add CPU Implementer Phytium
This patch adds 0x70 check for phytium implementer id in function
parse_cpu_details. Also adds that Phytium Soc is not vulnerable to variant 3/3a
|
2 years ago |
|
Stéphane Lesimple
|
4ec3154be0
|
chore: replace 'Vulnerable to' by 'Affected by' in the hw section
This seems to be less confusing, suggested by #356
|
3 years ago |
|
Stéphane Lesimple
|
843f26630d
|
feat: arm: add Cortex A77 and Neoverse-N1 (fixes #371)
|
3 years ago |
|
Stéphane Lesimple
|
7fc2ec65b9
|
bump to v0.44
|
3 years ago |
|
Stéphane Lesimple
|
c8cdfd54da
|
chore: fwdb: update to v165.20201021+i20200616
|
3 years ago |
|
Stéphane Lesimple
|
f0c33c7a32
|
fix: fwdb: use the commit date as the intel fwdb version
fixes #379
|
3 years ago |
|
Stéphane Lesimple
|
9e874397da
|
chore: fwdb: update to v163.20200930+i20200904
|
3 years ago |
|
Stéphane Lesimple
|
76cb73f3cb
|
fix: fwdb: update Intel's repository URL
|
3 years ago |
|
Stéphane Lesimple
|
90f23d286e
|
chore: update fwdb to v160.20200912+i20200722
|
3 years ago |
|
Stéphane Lesimple
|
e41e311a7f
|
feat: add zstd kernel decompression (#370)
|
3 years ago |
|
Stéphane Lesimple
|
1f75f01630
|
fwdb: update MCEdb to v148 & Intel firmwares to 2020-04-27
|
3 years ago |