spectre-meltdown-checker

peter/spectre-meltdown-checker

Fork 0

mirror of https://github.com/speed47/spectre-meltdown-checker.git synced 2026-03-31 12:17:13 +02:00

Commit Graph

Select branches

Hide Pull Requests

dev

dev-build

master

#1

#10

#100

#100

#101

#102

#102

#106

#107

#108

#11

#112

#116

#12

#121

#131

#136

#137

#137

#14

#14

#140

#141

#141

#142

#15

#15

#154

#16

#167

#174

#176

#176

#177

#18

#184

#187

#19

#192

#195

#199

#199

#2

#2

#200

#201

#202

#203

#204

#204

#209

#213

#213

#216

#222

#226

#227

#23

#230

#232

#232

#237

#239

#24

#242

#242

#243

#244

#245

#246

#25

#251

#252

#253

#259

#26

#262

#264

#265

#266

#268

#270

#271

#272

#276

#277

#280

#282

#285

#287

#290

#295

#299

#3

#300

#305

#306

#31

#312

#318

#319

#32

#323

#324

#325

#326

#327

#328

#33

#33

#332

#333

#334

#338

#345

#346

#352

#355

#358

#359

#361

#362

#363

#364

#365

#366

#367

#368

#37

#375

#377

#38

#380

#381

#382

#383

#386

#39

#391

#396

#397

#4

#401

#402

#403

#404

#405

#406

#407

#408

#41

#415

#417

#418

#42

#421

#422

#423

#424

#425

#426

#427

#431

#434

#435

#435

#436

#44

#441

#442

#444

#445

#446

#447

#448

#448

#449

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#460

#461

#462

#463

#467

#468

#469

#47

#470

#471

#479

#479

#48

#481

#483

#484

#487

#494

#495

#497

#498

#5

#50

#504

#506

#51

#511

#512

#513

#514

#515

#516

#517

#518

#521

#522

#523

#524

#53

#54

#55

#60

#61

#63

#63

#7

#71

#72

#73

#75

#75

#76

#76

#77

#79

#8

#80

#84

#85

#9

#9

#93

#93

v0.01

v0.02

v0.03

v0.04

v0.05

v0.06

v0.07

v0.08

v0.09

v0.10

v0.11

v0.12

v0.13

v0.14

v0.15

v0.16

v0.17

v0.18

v0.19

v0.20

v0.21

v0.22

v0.23

v0.24

v0.25

v0.26

v0.27

v0.28

v0.29

v0.30

v0.31

v0.32

v0.33

v0.34

v0.35

v0.36

v0.37

v0.38

v0.39

v0.40

v0.41

v0.42

v0.43

v0.44

v0.45

v0.46

5d6102a00e enh: show kernel version in offline mode Stéphane Lesimple 2018-02-02 11:27:04 +01:00
a2dfca671e feat: detect disrepancy between found kernel image and running kernel Stéphane Lesimple 2018-02-02 11:13:54 +01:00
36bd80d75f enh: speedup by not decompressing kernel on --sysfs-only Stéphane Lesimple 2018-02-02 11:13:31 +01:00
1834dd6201 feat: add skylake era cpu detection routine Stéphane Lesimple 2018-02-02 11:12:10 +01:00
3d765bc703 enh: lazy loading of cpu informations Stéphane Lesimple 2018-02-02 11:10:36 +01:00
07afd95b63 feat: better cleanup routine on exit & interrupt Stéphane Lesimple 2018-02-02 11:09:36 +01:00
b7a10126d1 fix: ARM CPU display name & detection Stéphane Lesimple 2018-02-02 11:00:23 +01:00
6346a0deaa fix: --no-color workaround for android's sed Stéphane Lesimple 2018-02-02 10:59:49 +01:00
8106f91981 release: bump to v0.34 v0.34 Stéphane Lesimple 2018-01-31 16:28:54 +01:00
b1fdf88f28 enh: display ucode info even when not blacklisted Stéphane Lesimple 2018-01-31 16:21:32 +01:00
4d29607630 cleanup: shellcheck pass Stéphane Lesimple 2018-01-31 14:58:54 +01:00
0267659adc cleanup: remove superseded atom detection code Stéphane Lesimple 2018-01-31 14:55:58 +01:00
247b176882 feat: detect known speculative-execution free CPUs Stéphane Lesimple 2018-01-31 14:21:29 +01:00
bcae8824ec refacto: create a dedicated func to read cpuid bits Stéphane Lesimple 2018-01-31 13:54:59 +01:00
71e7109c22 refacto: move cpu discovery bits to a dedicated function Stéphane Lesimple 2018-01-31 13:00:58 +01:00
aa18b51e1c fix(variant1): smarter lfence check Stéphane Lesimple 2018-01-30 22:59:44 +01:00
b738ac4bd7 fix: regression introduced by previous commit Stéphane Lesimple 2018-01-31 12:13:50 +01:00
799ce3eb30 update blacklisted ucode list from kernel source Stéphane Lesimple 2018-01-31 11:23:30 +01:00
f1e18c136f doc(disclaimer): Spectre affects all software Stéphane Lesimple 2018-01-30 14:33:30 +01:00
e05ec5c85f feat(variant1): detect vanilla mitigation Stéphane Lesimple 2018-01-30 12:13:39 +01:00
6e544d6055 fix(cpu): Pentium Exxxx are vulnerable to Meltdown Stéphane Lesimple 2018-01-29 11:18:15 +01:00
90a65965ff adjust: show how to enable IBRS/IBPB in -v only Stéphane Lesimple 2018-01-29 11:06:15 +01:00
9b53635eda refacto: fix shellcheck warnings for better compat Stéphane Lesimple 2018-01-29 10:29:48 +01:00
7404929661 Fix printing of microcode to use cpuinfo values Joseph Mulloy 2018-01-26 10:44:44 -05:00
bf46fd5d9b update: new screenshots for README.md Stéphane Lesimple 2018-01-26 15:13:07 +01:00
0798bd4c5b fix: report arch_capabilities as NO when no MSR Stéphane Lesimple 2018-01-26 14:55:01 +01:00
42094c4f8b release: v0.33 v0.33 Stéphane Lesimple 2018-01-26 14:20:29 +01:00
03d2dfe008 feat: add blacklisted Intel ucode detection Stéphane Lesimple 2018-01-26 12:58:07 +01:00
9f00ffa5af fix: fallback to UNKNOWN when we get -EACCES Stéphane Lesimple 2018-01-26 14:16:34 +01:00
7f0d80b305 xen: detect if the host is a Xen Dom0 or PV DomU (fixes #83) Matthieu Cerda 2018-01-24 17:14:04 +01:00
d1c1f0f0f0 fix(batch): fix regression introduced by acf12a6 Stéphane Lesimple 2018-01-24 17:55:36 +01:00
acf12a6d2d feat(cpu) add STIBP, RDCL_NO, IBRS_ALL checks Stéphane Lesimple 2018-01-24 14:44:16 +01:00
b45e40bec8 feat(stibp): add STIBP cpuid feature check Stéphane Lesimple 2018-01-24 12:19:02 +01:00
3c1d452c99 fix(cpuid): fix off-by-one SPEC_CTRL bit check Stéphane Lesimple 2018-01-24 12:18:56 +01:00
53b9eda040 fix: don't make IBPB mandatory when it's not there Stéphane Lesimple 2018-01-24 08:53:33 +01:00
3b0ec998b1 fix(cosmetic): tiny msg fixes Stéphane Lesimple 2018-01-23 20:25:24 +01:00
d55bafde19 fix(cpu): trust is_cpu_vulnerable even w/ debugfs Stéphane Lesimple 2018-01-22 11:00:54 +01:00
147462c0ab fix(variant3): do our checks even if sysfs is here Stéphane Lesimple 2018-01-22 10:56:24 +01:00
ddc7197b86 fix(retpoline): retpoline-compiler detection Stéphane Lesimple 2018-01-22 10:48:48 +01:00
e7aa3b9d16 feat(retpoline): check if retpoline is enabled Stéphane Lesimple 2018-01-21 18:07:25 +01:00
ff5c92fa6f feat(sysfs): print details even with sysfs Stéphane Lesimple 2018-01-21 18:02:11 +01:00
443d9a2ae9 feat(ibpb): now also check for IBPB on variant 2 Stéphane Lesimple 2018-01-21 13:48:05 +01:00
3e454f1817 fix(offline): report unknown when too few info Stéphane Lesimple 2018-01-23 22:20:34 +01:00
c8a25c5d97 feat: detect invalid kconfig files Stéphane Lesimple 2018-01-23 21:48:19 +01:00
40381349ab fix(dmesg): detect when dmesg is truncated Stéphane Lesimple 2018-01-21 15:17:10 +01:00
0aa5857a76 fix(cpu): Pentium Exxxx series are not vulnerable Stéphane Lesimple 2018-01-21 13:28:42 +01:00
b3b7f634e6 fix(display): use text-mode compatible colors Stéphane Lesimple 2018-01-21 12:32:22 +01:00
263ef65fec bump to v0.32 v0.32 Stéphane Lesimple 2018-01-20 12:49:12 +01:00
a1bd233c49 revert to a simpler check_vmlinux() Stéphane Lesimple 2018-01-20 12:26:26 +01:00
de6590cd09 cache is_cpu_vulnerable result for performance Stéphane Lesimple 2018-01-18 21:16:14 +01:00
56d4f82484 is_cpu_vulnerable: implement check for multi-arm systems Stéphane Lesimple 2018-01-18 18:50:19 +01:00
7fa2d6347b check_vmlinux: when readelf doesn't work, try harder with another way Stéphane Lesimple 2018-01-18 11:01:26 +01:00
3be5e90481 be smarter to find a usable echo command Stéphane Lesimple 2018-01-18 11:00:40 +01:00
995620a682 add pine64 vmlinuz location Stéphane Lesimple 2018-01-16 18:19:33 +01:00
193e0d8d08 arm: cosmetic fix for name and handle aarch64 Stéphane Lesimple 2018-01-15 23:45:25 +01:00
72ef94ab3d ARM: display a friendly name instead of empty string Stéphane Lesimple 2018-01-15 14:12:49 +01:00
ccc0453df7 search in /lib/modules/$(uname -r) for vmlinuz, config, System.map Harald Hoyer 2018-01-19 12:35:16 +01:00
14ca49a042 Atom N270: implement another variation Stéphane Lesimple 2018-01-19 18:47:38 +01:00
db357b8e25 CoreOS: remove ephemeral install of a non-used package Stéphane Lesimple 2018-01-18 10:17:25 +01:00
42a57dd980 add kern.log as another backend of dmesg output Stéphane Lesimple 2018-01-17 17:17:39 +01:00
5ab95f3656 fix(atom): don't use a pcre regex, only an extended one Stéphane Lesimple 2018-01-17 12:01:13 +01:00
5b6e39916d fix(atom): properly detect Nxxx Atom series Stéphane Lesimple 2018-01-17 11:07:47 +01:00
556951d5f0 Add Support for Slackware. Willy Sudiarto Raharjo 2018-01-16 16:58:00 +07:00
7a88aec95f Implement CoreOS compatibility mode (#84) Stéphane Lesimple 2018-01-16 10:33:01 +01:00
bd18323d79 bump to v0.31 to reflect changes v0.31 Stéphane Lesimple 2018-01-14 22:34:09 +01:00
b89d67dd15 meltdown: detecting Xen PV, reporting as not vulnerable Stéphane Lesimple 2018-01-14 18:33:01 +01:00
704e54019a is_cpu_vulnerable: add check for old Atoms Stéphane Lesimple 2018-01-14 15:10:39 +01:00
d96093171a verbose: add PCID check for performance impact of PTI Stéphane Lesimple 2018-01-14 17:18:34 +01:00
dcc4488340 Merge pull request #80 from speed47/cpuid_spec_ctrl v0.30 Stéphane Lesimple 2018-01-14 16:48:02 +01:00
32e3fe6c07 bump to v0.30 to reflect changes Stéphane Lesimple 2018-01-14 16:45:59 +01:00
f488947d43 Merge pull request #79 from andir/add-nixos Stéphane Lesimple 2018-01-14 16:40:10 +01:00
71213c11b3 ibrs: check for spec_ctrl_ibrs in cpuinfo Stéphane Lesimple 2018-01-14 16:36:51 +01:00
2964c4ab44 add support for NixOS kernel Andreas Rammhold 2018-01-14 16:18:29 +01:00
749f432d32 also check for spec_ctrl flag in cpuinfo Stéphane Lesimple 2018-01-14 15:44:11 +01:00
a422b53d7c also check for cpuinfo flag Stéphane Lesimple 2018-01-14 15:28:53 +01:00
c483a2cf60 check spec_ctrl support using cpuid Stéphane Lesimple 2018-01-13 16:24:09 +01:00
dead0054a4 fix: proper detail msg in vuln status Stéphane Lesimple 2018-01-14 15:47:22 +01:00
8ed7d465aa Merge pull request #77 from speed47/exitcode Stéphane Lesimple 2018-01-14 14:25:12 +01:00
e5e4851d72 proper return codes regardless of the batch mode Stéphane Lesimple 2018-01-13 20:33:12 +01:00
7f92717a2c add info about accuracy when missing kernel files Stéphane Lesimple 2018-01-13 13:59:17 +01:00
b47d505689 AMD now vuln to variant2 (as per their stmt) v0.29 Stéphane Lesimple 2018-01-13 13:35:13 +01:00
4a2d051285 minor is_cpu_vulnerable() changes (#71) Corey Hickey 2018-01-13 04:16:37 -08:00
f3551b9734 Only show the name of the script, not the full path (#72) Sylvestre Ledru 2018-01-13 13:14:19 +01:00
45b98e125f fix some typos (#73) Sylvestre Ledru 2018-01-13 13:13:40 +01:00
dce917bfbb add --version, bump to v0.28 v0.28 Stéphane Lesimple 2018-01-12 19:10:44 +01:00
8f18f53aba add cpu model in output Stéphane Lesimple 2018-01-12 19:07:23 +01:00
d3f102b3b3 Typofix in readme (#61) M. Willis Monroe 2018-01-12 04:58:04 -08:00
8bd093173d Fixed a few spelling errors (#60) M. Willis Monroe 2018-01-12 02:46:36 -08:00
bfe5a3b840 add some debug Stéphane Lesimple 2018-01-12 10:53:19 +01:00
6a0242eea3 bump to v0.27 v0.27 Stéphane Lesimple 2018-01-11 15:36:41 +01:00
bc4e39038a fix(opcodes): fix regression introduced in previous commit Stéphane Lesimple 2018-01-11 15:35:57 +01:00
62f8ed6f61 adding support for new /sys interface (#55) v0.26 Stéphane Lesimple 2018-01-11 12:23:16 +01:00
56b67f8082 Typo in README (#54) Gianluca Varisco 2018-01-11 12:01:31 +01:00
52a8f78885 send warning to stderr. (#53) Tobias Rüetschi 2018-01-11 09:55:43 +01:00
a09a5ba38f bump to v0.25 to reflect changes v0.25 Stéphane Lesimple 2018-01-11 09:08:29 +01:00
5a7d8d7edf Produce JSON output formatted for Puppet, Ansible, Chef... (#50) Abdoul Bah 2018-01-11 09:04:13 +01:00
49fdc6c449 Merge pull request #51 from cowanml/file_read_check_fixup Stéphane Lesimple 2018-01-10 21:39:09 +01:00
af3de2a862 fixed file read test Matt Cowan 2018-01-10 15:17:14 -05:00
c6e1b0ac8a feat(kernel): add support for LZ4 decompression v0.24 Stéphane Lesimple 2018-01-10 20:10:57 +01:00
b913dacc1b Merge pull request #48 from speed47/opensuse Stéphane Lesimple 2018-01-10 18:41:30 +01:00