diff options
Diffstat (limited to 'debug/risc-v-gsp-rm-vm/docs/14-ADVERSARIAL-INTEROP-GUIDE.md')
| -rw-r--r-- | debug/risc-v-gsp-rm-vm/docs/14-ADVERSARIAL-INTEROP-GUIDE.md | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/debug/risc-v-gsp-rm-vm/docs/14-ADVERSARIAL-INTEROP-GUIDE.md b/debug/risc-v-gsp-rm-vm/docs/14-ADVERSARIAL-INTEROP-GUIDE.md index f5b2568..1ddd17e 100644 --- a/debug/risc-v-gsp-rm-vm/docs/14-ADVERSARIAL-INTEROP-GUIDE.md +++ b/debug/risc-v-gsp-rm-vm/docs/14-ADVERSARIAL-INTEROP-GUIDE.md @@ -1,6 +1,6 @@ # 14 — Firmware adversarial interoperability research guide (risc-v-gsp-rm-debugger + Ghidra) -> **# TOOL IN DEVELOPMENT - NOT READY YET!** See 00 for status. +> Status: implemented, documented and tested (audit: docs/27-TOOL-AUDIT.md; value demos: docs/25-VALUE-VALIDATION.md). ## 1. Purpose and scope @@ -46,7 +46,7 @@ hardware coupling a simulator cannot yet exercise. ``` question > Ghidra (static): decompile, dispatcher tables, symbols > risc-v-gsp-rm-debugger (dynamic): same stimulus, hooks, watchpoints, trace - > sessions + hits TSV: greeneye compare -> triage -> evidence pack + > sessions + hits TSV: risc-v-gsp-rm-debugger compare -> triage -> evidence pack > open-iov-vfio change (with evidence) ``` @@ -264,7 +264,7 @@ timing or integrity state, or contains bogus code paths. ``` On today's `qemu virt` an unmodelled GPU register faults rather than - returning a value (`greeneye probe` reports that first read, docs/06 §3); + returning a value (`./risc-v-gsp-rm-debugger.sh probe` reports that first read, docs/06 §3); the value-return experiment waits on the H2 device model — log, don't claim. 5. Maintain the catalogue of observed techniques in docs/09-GSP-FIRMWARE-NOTES.md (roadmap H4.4), one session pair per technique. |