5,579
edits
Changes
→boot0: removed section since the bug was moved to /Untested
Line 38:
Line 38:
|}
−== boot0 ==
−{| class="wikitable sortable" border="1"
−|-
−! Summary
−! Description
−! Successful exploitation result
−! Fixed in boot0 version
−! Discovered
−! Discovered by
−|-
−| Dead jump instruction after jump to panic {{Anchor|boot0-skippanic}}
−| [[boot0]] has a common panic routine that runs under a number of scenarios, one of which is when the [[boot1]] hash check fails. For unknown reasons, there is an extra jump to the normal boot1 loading code after panic returns ([[boot0/Code dump|offset FFFF04E0]]), despite panic never having any possibility of returning. It may be possible to time a voltage attack correctly to skip over the jump-to-panic instruction, allowing for certain recovery software.
−| Bypassing the boot1 hash check
−| Unfixed
−| {{SortableMonth|May|2021}}
−| {{User|Hallowizer}}
| {{SortableMonth|Dec|2006}}
| {{SortableMonth|Dec|2006}}
| tmbinc
| tmbinc
−|}
|}