Stéphane Lesimple
5bbffaf053
fix: another attempt to avoid sigpipe on grep ( #519 )
...
Take this opportunity to factorize all the greps in /proc/cpuinfo
into a helper that avoids using a pipe to entirely avoid SIGPIPE
on a possibly gigantic /proc/cpuinfo
2026-06-10 23:33:10 +02:00
Stéphane Lesimple
048ce5b6a2
enh: add FPDSS check for AMD Zen1/Zen+ (CVE-2025-54505)
2026-04-18 17:18:42 +02:00
Stéphane Lesimple
48454a5344
fix: remove useless checks under ARM for CVE-2023-28746
2026-04-10 19:50:15 +02:00
Stéphane Lesimple
e67c9e4265
enh: use g_mode to explicitly save/load the current running mode
2026-04-10 19:28:10 +02:00
Stéphane Lesimple
f7ba617e16
enh: guard x86/arm specific checks in kernel/cpu for the proper arch
2026-04-10 19:28:10 +02:00
Stéphane Lesimple
e110706df8
enh: factorize is_arch_kernel
2026-04-10 18:37:14 +02:00
Stéphane Lesimple
98ec067aef
enh: rework json/prom output to better split x86/arm
2026-04-08 22:58:36 +02:00
Stéphane Lesimple
ff42393fa6
new batch mode docs, add doc/ to -build branch
2026-04-08 22:58:36 +02:00
Stéphane Lesimple
39dea1245e
feat: rework the --batch json output entirely
2026-04-08 22:35:53 +02:00
Stéphane Lesimple
3afbda8430
enh: when reading CPUID is unavailable (VM?), fallback to cpuinfo where applicable
...
cap_* variable <= cpuinfo flag
cap_ibrs <= ibrs
cap_ibpb <= ibpb
cap_stibp <= stibp
cap_ssbd <= ssbd / virt_ssbd
cap_l1df <= flush_l1d
cap_md_clear <= md_clear
cap_arch_capabilities <= arch_capabilities
Should fix #288
2026-04-08 22:35:53 +02:00
Stéphane Lesimple
42ed8efa65
fix: better compatibility under busybox, silence buggy unzlma versions ( fix #432 )
2026-04-08 22:35:53 +02:00
Stéphane Lesimple
53c45e3363
doc: update dev guidelines
2026-04-08 22:35:53 +02:00
Stéphane Lesimple
cccb3c0081
enh: add known fixed ucode versions for CVE-2023-23583 (Reptar) and CVE-2024-45332 (BPI)
2026-04-04 16:07:12 +00:00
Stéphane Lesimple
4af11551ba
feat: implement CVE-2024-28956 (ITS, Indirect Target Selection) vulnerability and mitigation detection
2026-04-04 16:07:12 +00:00
Stéphane Lesimple
d644941a76
chore: update dev doc with check_CVE_* header exception
2026-04-02 22:09:09 +02:00
Stéphane Lesimple
3ea8e213ec
chore: add proper header to all src/vulns/* files
2026-04-02 21:03:29 +02:00
Stéphane Lesimple
37204869f8
chore: update dev guidelines
2026-04-02 19:55:07 +02:00
Stéphane Lesimple
08702b07c9
fix: bad kernel/config var names
2026-04-01 19:53:34 +00:00
Stéphane Lesimple
b9e7f7cb8a
docs: update development guidelines
2026-04-01 21:12:23 +02:00
Stéphane Lesimple
295324a545
chore: prepare for dev-build renaming to test-build
2026-03-31 19:49:39 +02:00
Stéphane Lesimple
efa07e7fd9
chore: set VERSION when building
2026-03-31 00:18:09 +02:00
Stéphane Lesimple
eabddf3d72
update dev docs and refactor CVE list in readme
2026-03-30 23:35:48 +02:00
Stéphane Lesimple
5a0c391b06
doc: update development guidelines
2026-03-30 23:07:59 +02:00
Stéphane Lesimple
72824deea5
doc: add a note about the mandatory POSIX compliance of used tools
2026-03-30 20:48:10 +02:00
Stéphane Lesimple
7e660812e9
standardize function naming and add doc headers to all of them
2026-03-30 19:55:15 +02:00
Stéphane Lesimple
a74111bfcd
use global readonly vars for common paths/basedirs
2026-03-30 19:31:22 +02:00
Stéphane Lesimple
80a31d25cc
second vars renaming pass
2026-03-30 07:13:45 +00:00
Stéphane Lesimple
c34517dc99
chore: add variables naming convention documentation
2026-03-30 00:09:24 +00:00