-
Notifications
You must be signed in to change notification settings - Fork 9
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[PROPOSAL] Transient Execution Weaknesses #5
Open
scottconstable
wants to merge
10
commits into
CWE-CAPEC:main
Choose a base branch
from
scottconstable:main
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Commits on Feb 10, 2023
-
Configuration menu - View commit details
-
Copy full SHA for a3f7a0e - Browse repository at this point
Copy the full SHA a3f7a0eView commit details -
Fixed formatting in transient.md
Fixed formatting issues that emerged after the docx->md translation
Configuration menu - View commit details
-
Copy full SHA for a8e4417 - Browse repository at this point
Copy the full SHA a8e4417View commit details
Commits on Mar 24, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 0957b58 - Browse repository at this point
Copy the full SHA 0957b58View commit details
Commits on Apr 19, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 0adef88 - Browse repository at this point
Copy the full SHA 0adef88View commit details
Commits on Aug 16, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 81b68ff - Browse repository at this point
Copy the full SHA 81b68ffView commit details -
The updated PR has reframed the CWEs to incorporate more condition-or…
…iented language. Specifically: - CWE-B describes the condition where transient operations are allowed to access and operate on data in a shared microarchitectural structure - CWE-C describes the condition where a hardware exception causes incorrect/stale data to be forwarded to dependent transient operations - CWE-D is only a renaming of CWE-C in the previous proposal. CWE-D describes the condition of sharing microarchitectural predictor state - CWE-E is only a renaming of CWE-D in the previous proposal. CWE-E describes the condition of a microarchitectural predictor causing transient execution - CWE-A is a catch-all for transient execution, and would be a parent of CWE-[B-E]. Since CWE-B and CWE-C have been refined into specific conditions, I saw no way to avoid introducing a catch-all.
Configuration menu - View commit details
-
Copy full SHA for 4c84009 - Browse repository at this point
Copy the full SHA 4c84009View commit details
Commits on Sep 19, 2023
-
September 2023 transient execution weakness update.
- We removed a CWE that applied exclusively to predictor-based transient execution not involving shared predictor state. We believe that CWE-A suffices to cover these cases. - Some of that CWE's extended description has been updated and merged into CWE-A. - There is a placeholder CWE-E that will cover "speculation oracle" weaknesses such as Pacman.
Configuration menu - View commit details
-
Copy full SHA for 2fcde6b - Browse repository at this point
Copy the full SHA 2fcde6bView commit details
Commits on Oct 26, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 47bbf67 - Browse repository at this point
Copy the full SHA 47bbf67View commit details
Commits on Nov 22, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 6fc8137 - Browse repository at this point
Copy the full SHA 6fc8137View commit details -
Configuration menu - View commit details
-
Copy full SHA for b14189c - Browse repository at this point
Copy the full SHA b14189cView commit details
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.