Remix.run Logo
The History of a Security Hole(os2museum.com)
33 points by st_goliath 4 days ago | 2 comments
amabito 4 days ago | parent | next [-]

IOPB bit semantics are inverted from what you might expect: 0 means permitted, 1 means denied. So zeroed pcb memory silently grants access to every port in range -- that's why this was consistently reproducible, not flaky. One sizeof() away from correct the whole time.

xoxxala 2 hours ago | parent | prev [-]

(2018)