peter/spectre-meltdown-checker
1
0
Fork 0
mirror of https://github.com/speed47/spectre-meltdown-checker.git synced 2026-09-05 02:13:56 +02:00
Code Issues Projects Releases Wiki Activity
159 Commits 9 Branches 50 Tags
0aa5857a76abb624b1186496c00d431ec0ffeca3
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Stéphane Lesimple 0aa5857a76 fix(cpu): Pentium Exxxx series are not vulnerable 
Pentium E series are not in the vulnerable list from
Intel, and Spectre2 PoC reportedly doesn't work on
an E5200
 2018-01-21 16:13:17 +01:00
Stéphane Lesimple b3b7f634e6 fix(display): use text-mode compatible colors 
in text-mode 80-cols TERM=linux terminals, colors
were not displaying properly, one had to use
--no-color to be able to read some parts of the
text.
 2018-01-21 12:32:22 +01:00
Stéphane Lesimple 263ef65fec bump to v0.32 2018-01-20 12:49:12 +01:00
Stéphane Lesimple a1bd233c49 revert to a simpler check_vmlinux() 2018-01-20 12:26:26 +01:00
Stéphane Lesimple de6590cd09 cache is_cpu_vulnerable result for performance 2018-01-20 12:24:23 +01:00
Stéphane Lesimple 56d4f82484 is_cpu_vulnerable: implement check for multi-arm systems 2018-01-20 12:24:23 +01:00
Stéphane Lesimple 7fa2d6347b check_vmlinux: when readelf doesn't work, try harder with another way 2018-01-20 12:23:55 +01:00
Stéphane Lesimple 3be5e90481 be smarter to find a usable echo command 2018-01-20 12:23:55 +01:00
Stéphane Lesimple 995620a682 add pine64 vmlinuz location 2018-01-20 12:23:19 +01:00
Stéphane Lesimple 193e0d8d08 arm: cosmetic fix for name and handle aarch64 2018-01-20 12:22:48 +01:00
Stéphane Lesimple 72ef94ab3d ARM: display a friendly name instead of empty string 2018-01-20 12:22:48 +01:00
Stéphane Lesimple 14ca49a042 Atom N270: implement another variation 2018-01-19 18:47:38 +01:00
Stéphane Lesimple db357b8e25 CoreOS: remove ephemeral install of a non-used package 2018-01-18 10:17:25 +01:00
Stéphane Lesimple 42a57dd980 add kern.log as another backend of dmesg output 2018-01-17 17:17:39 +01:00
Stéphane Lesimple 5ab95f3656 fix(atom): don't use a pcre regex, only an extended one 2018-01-17 12:01:13 +01:00
Stéphane Lesimple 5b6e39916d fix(atom): properly detect Nxxx Atom series 2018-01-17 11:07:47 +01:00
Stéphane Lesimple 7a88aec95f Implement CoreOS compatibility mode (#84) 
* Add special CoreOS compatibility mode
* CoreOS: refuse --coreos if we're not under CoreOS
* CoreOS: warn if launched without --coreos option
* is_coreos: make stderr silent
* CoreOS: tiny adjustments
 2018-01-16 10:33:01 +01:00
Stéphane Lesimple bd18323d79 bump to v0.31 to reflect changes 2018-01-14 22:34:09 +01:00
Stéphane Lesimple b89d67dd15 meltdown: detecting Xen PV, reporting as not vulnerable 2018-01-14 22:31:21 +01:00
Stéphane Lesimple 704e54019a is_cpu_vulnerable: add check for old Atoms 2018-01-14 21:32:56 +01:00
Stéphane Lesimple d96093171a verbose: add PCID check for performance impact of PTI 2018-01-14 17:18:34 +01:00
Stéphane Lesimple dcc4488340 Merge pull request #80 from speed47/cpuid_spec_ctrl 
v0.30, cpuid spec ctrl and other enhancements
 2018-01-14 16:48:02 +01:00
Stéphane Lesimple 32e3fe6c07 bump to v0.30 to reflect changes 2018-01-14 16:45:59 +01:00
Stéphane Lesimple f488947d43 Merge pull request #79 from andir/add-nixos 
add support for NixOS kernel
 2018-01-14 16:40:10 +01:00
Stéphane Lesimple 71213c11b3 ibrs: check for spec_ctrl_ibrs in cpuinfo 2018-01-14 16:36:51 +01:00
Stéphane Lesimple 749f432d32 also check for spec_ctrl flag in cpuinfo 2018-01-14 15:47:51 +01:00
Stéphane Lesimple a422b53d7c also check for cpuinfo flag 2018-01-14 15:47:51 +01:00
Stéphane Lesimple c483a2cf60 check spec_ctrl support using cpuid 2018-01-14 15:47:51 +01:00
Stéphane Lesimple dead0054a4 fix: proper detail msg in vuln status 2018-01-14 15:47:22 +01:00
Stéphane Lesimple 8ed7d465aa Merge pull request #77 from speed47/exitcode 
proper return codes regardless of the batch mode
 2018-01-14 14:25:12 +01:00
Stéphane Lesimple e5e4851d72 proper return codes regardless of the batch mode 2018-01-14 14:24:31 +01:00
Stéphane Lesimple 7f92717a2c add info about accuracy when missing kernel files 2018-01-13 13:59:17 +01:00
Stéphane Lesimple b47d505689 AMD now vuln to variant2 (as per their stmt) 2018-01-13 13:35:31 +01:00
Stéphane Lesimple dce917bfbb add --version, bump to v0.28 2018-01-12 19:10:44 +01:00
Stéphane Lesimple 8f18f53aba add cpu model in output 2018-01-12 19:08:12 +01:00
Stéphane Lesimple bfe5a3b840 add some debug 2018-01-12 10:53:19 +01:00
Stéphane Lesimple 6a0242eea3 bump to v0.27 2018-01-11 15:36:41 +01:00
Stéphane Lesimple bc4e39038a fix(opcodes): fix regression introduced in previous commit 
We were saying unknown instead of vulnerable when the count of lfence opcodes was low
This was not impacting batch mode or the final decision, just the human-readable output of the script.
 2018-01-11 15:35:57 +01:00
Stéphane Lesimple 62f8ed6f61 adding support for new /sys interface (#55) 
* adding support for new /sys interface
* fix(objdump): prefer -d instead of -D, some kernels crash objdump otherwise
 2018-01-11 12:23:16 +01:00
Stéphane Lesimple a09a5ba38f bump to v0.25 to reflect changes 2018-01-11 09:08:29 +01:00
Stéphane Lesimple 49fdc6c449 Merge pull request #51 from cowanml/file_read_check_fixup 
fixed file read test
 2018-01-10 21:39:09 +01:00
Stéphane Lesimple c6e1b0ac8a feat(kernel): add support for LZ4 decompression 2018-01-10 20:10:57 +01:00
Stéphane Lesimple b913dacc1b Merge pull request #48 from speed47/opensuse 
fix(opensuse): add specific location for ibrs_enabled file
 2018-01-10 18:41:30 +01:00
Stéphane Lesimple eb0ebef5a8 fix(opensuse): add specific location for ibrs_enabled file 2018-01-10 17:40:33 +01:00
Stéphane Lesimple e0254025e8 Merge pull request #47 from speed47/readme 
update readme
 2018-01-10 17:12:54 +01:00
Stéphane Lesimple bd010340e6 update readme 2018-01-10 17:12:33 +01:00
Stéphane Lesimple a658de2f01 fix(kernel): fix detection for separate /boot partitions 2018-01-10 16:27:16 +01:00
Stéphane Lesimple 4aed5589fe Merge pull request #44 from speed47/bootimage 
feat(kernel): check the BOOT_IMAGE info from cmdline before trying th…
 2018-01-10 16:13:00 +01:00
Stéphane Lesimple 8ed1f5e3af feat(kernel): check the BOOT_IMAGE info from cmdline before trying the default names 2018-01-10 15:46:29 +01:00
Stéphane Lesimple ffc542eb82 bump to v0.23 to reflect changes 2018-01-10 15:25:55 +01:00
Stéphane Lesimple 74bc7ba637 add --variant to specify what check we want to run 2018-01-10 15:22:30 +01:00
Stéphane Lesimple 5389ac6844 Merge pull request #41 from bang-communications/master 
NRPE mode
 2018-01-10 15:11:45 +01:00
Stéphane Lesimple 36fb83215a Merge pull request #42 from simon-vasseur/style 
added some style (screenshot in readme)
 2018-01-10 15:07:34 +01:00
Stéphane Lesimple d6e4aa43f0 Merge pull request #37 from deufrai/better-dmesg-support 
Improve PTI detection
 2018-01-09 19:52:45 +01:00
Stéphane Lesimple e5e09384f0 typofix 2018-01-09 18:54:35 +01:00
Stéphane Lesimple 7222367f04 add disclaimer and bump to 0.21 2018-01-09 18:52:21 +01:00
Stéphane Lesimple ab512687cf Merge pull request #38 from Alkorin/fixARM 
Fix ARM checks
 2018-01-09 18:47:25 +01:00
Stéphane Lesimple a5aaa790a0 Merge pull request #39 from Alkorin/typo 
Fix small typo in error message
 2018-01-09 18:45:58 +01:00
Stéphane Lesimple 1c3d349667 Merge pull request #31 from Feandil/batch 
Add a "batch" and "verbose" mode
 2018-01-09 18:12:39 +01:00
Stéphane Lesimple b93b13263d fix(pti): remove escapes since we use grep -E now 2018-01-09 16:01:44 +01:00
Stéphane Lesimple 322f4efc8f fix broken logic of 68961f9, increment version to 0.20 2018-01-09 14:55:12 +01:00
Stéphane Lesimple 19b01078c2 Merge pull request #32 from speed47/arm 
adding known non-vulnerable ARM chips
 2018-01-09 13:57:27 +01:00
Stéphane Lesimple 68961f98c2 adding known non-vulnerable ARM chips 2018-01-09 13:11:48 +01:00
Stéphane Lesimple f0f2ea9b11 v0.19: introduce --no-color 2018-01-09 10:32:51 +01:00
Stéphane Lesimple 6f1bdba1d9 bump to v0.18 to reflect changes 2018-01-09 09:21:42 +01:00
Stéphane Lesimple 7b05105a54 Merge pull request #25 from Feandil/proc_config 
When using /proc/config.gz, indicate it more clearly
 2018-01-09 09:19:36 +01:00
Stéphane Lesimple 8aed2d4086 Merge pull request #26 from Feandil/proc_kallsym 
Use /proc/kallsyms to get symbols, if available
 2018-01-09 09:17:18 +01:00
Stéphane Lesimple 2d94514c07 adding mention of heuristic for variant 1 check 2018-01-09 08:43:52 +01:00
Stéphane Lesimple 0e8f97afbc Merge pull request #24 from angus-p/Remove-extra-space 
remove superfluous space from test line 315
 2018-01-09 08:34:10 +01:00
Stéphane Lesimple 70323a30da Merge pull request #23 from mradcliffe/issue-22 
Increases tmp directory uniqueness to 6 characters to support Slackware
 2018-01-09 08:33:32 +01:00
Stéphane Lesimple 949f316f89 missed version bump + README typofix 2018-01-08 23:15:42 +01:00
Stéphane Lesimple 5082afae61 Merge pull request #19 from speed47/offline_mode 
implement offline mode and help
 2018-01-08 23:13:19 +01:00
Stéphane Lesimple d73a24cb5b implement offline mode and help 2018-01-08 23:09:17 +01:00
Stéphane Lesimple 75332e6e0f Merge pull request #18 from GrimKriegor/linux-libre_support 
Linux-libre support
 2018-01-08 23:07:41 +01:00
Stéphane Lesimple 8d4d295309 bump to v0.16 to reflect changes 2018-01-08 17:48:20 +01:00
Stéphane Lesimple 1ff437edbb Merge pull request #16 from Alkorin/fixes 
Fixes
 2018-01-08 17:45:59 +01:00
Stéphane Lesimple 34656827f5 detect retpoline-compliant compiler from latest LKML patches 2018-01-08 17:32:19 +01:00
Stéphane Lesimple 206e4b7fbc add detection of retpoline-aware compiler 2018-01-08 16:28:00 +01:00
Stéphane Lesimple 207168e097 detect if the used compiler supports retpoline (WIP) 2018-01-08 15:45:09 +01:00
Stéphane Lesimple f8ca11e56a Merge pull request #12 from sebastianw/fix-double-print 
Remove superfluous 'YES' output when checking cpuinfo
 2018-01-08 15:05:15 +01:00
Stéphane Lesimple 88df48f4a7 Merge pull request #11 from sebastianw/kaiser-cpu-flag 
Recognize 'kaiser' flag in /proc/cpuinfo
 2018-01-08 14:45:40 +01:00
Stéphane Lesimple 7bbcfe0df7 Merge pull request #7 from Feandil/redhat 
Redhat support
 2018-01-08 14:17:33 +01:00
Stéphane Lesimple edbdf0da1f push the lfence opcodes threshold to 70 2018-01-08 12:49:23 +01:00
Stéphane Lesimple 68adbfdf14 Merge pull request #10 from Alkorin/permissionDenied 
Avoid 'cat: /sys/kernel/debug/x86/pti_enabled: Permission denied'
 2018-01-08 12:44:09 +01:00
Stéphane Lesimple ef7a5c4cf6 adding uname -v to get potential additional vendor information 2018-01-08 12:22:56 +01:00
Stéphane Lesimple 4406910bea Merge pull request #8 from Feandil/debugfs 
Fix debugfs mount check
 2018-01-08 12:19:23 +01:00
Stéphane Lesimple c792fa35bf add kernel version information to the output 2018-01-08 12:14:12 +01:00
Stéphane Lesimple d1498fe03f Merge pull request #5 from fccagou/centos 
fix(centos): check according to redhat patch.
 2018-01-08 12:10:07 +01:00
Stéphane Lesimple 12bdd0e412 root check is now more visible 2018-01-08 11:31:19 +01:00
Stéphane Lesimple 89f9bef577 Merge pull request #4 from dguglielmi/add-genkernel-support 
Add support for Gentoo genkernel image path
 2018-01-08 11:24:07 +01:00
Stéphane Lesimple 623e180ae1 Merge pull request #3 from TheHendla/arch_boot_img 
add arch linux bootimage path
 2018-01-08 10:51:59 +01:00
Stéphane Lesimple c1004d5171 fix extract-vmlinux for non-gzip 2018-01-08 09:56:29 +01:00
Stéphane Lesimple fa0850466e add some comments, enhance pti detection 2018-01-08 09:37:54 +01:00
Stéphane Lesimple 5c14384e15 Merge pull request #1 from t-nelis/root-check 
Improve "running as root" check
 2018-01-08 08:58:21 +01:00
Stéphane Lesimple 96dfa03c00 fix for uncompressed vmlinux case 2018-01-08 00:45:12 +01:00
Stéphane Lesimple 05c79425ab detect kpti directly in vmlinux if option is not there 2018-01-07 22:47:41 +01:00
Stéphane Lesimple 9def0c949a update readme 2018-01-07 20:13:10 +01:00
Stéphane Lesimple 64eb1d005c add couple missing elses 2018-01-07 18:49:15 +01:00
Stéphane Lesimple bffda8b3e7 remove dependency on rdmsr 2018-01-07 18:36:56 +01:00
Stéphane Lesimple 13f2133a97 cosmetic fix 2018-01-07 18:14:08 +01:00