ari Vatsva veBitdefender vaona hutsva hutsva mune michina yekufungidzira kuitiswa kwemirayiridzo mune zvazvino ma processor, uyo akagamuchira zita rekuti SWAPGS, Inoenderana nezita remushandirapamwe wekuraira zvichikonzera dambudziko.
Kunetseka inobvumira asina kurwisa anorwisa kuti aone zvirimo munzvimbo dzenzvimbo dzekurangarira kana kumhanya chaiwo michina. Iyo nyaya inosimbiswa paIntel processors (x86_64) uye inokanganisa zvishoma processor dze AMD idzo iyo yekutanga yekurwisa vector isingaoneke.
Iyo yakamboitwa Specter neMeltdown nzira dzekudzivirira njodzi hadzi dzivirire pakurwiswa kweSWAPGS uchishandisa ma processor eIntel, asi mhinduro dzeLinux, ChromeOS, Android neWindows zvakatorongwa kare.
Iyo kushushikana ndeye yekirasi yeSpecter v1 uye yakavakirwa pazano rekutora data kubva ku processor cache inosara mushure mekufungidzira kuitiswa kwemirairo.
Iko kushandurwa kwekufungidzira mabhuroko emaCUU emazuva ano anoshandisa kuitisa kweimwe mirairo, iyo ingangoitwa, kuvandudza mashandiro, asi pasina kumirira kuverenga kweese maficha anoisa kuuraya kwavo (semuenzaniso, kana mirairo yashanduka mamiriro kana maparamendi ekuwana haasati averengwa).
Kana fungidziro isina kusimbiswa, processor inorasa mhedzisiro yekufungidzira kumhanya, asi iyo data inogadziriswa panguva yekumhanya yakachengetedzwa neprosesa uye inogona kudzoreredzwa uchishandisa nzira dzekuziva zvirimo mune cache pane zviteshi. chinja munguva yekuwana kune yakachengetwa uye isina-cached dhata.
Nezve SWAPGS
Iko kusarudzika kwekurwiswa kutsva iko kushandiswa kwekudonha kunovapo panguva yekufungidzira kuitiswa kweSWAPGS kuraira, iyo inoshandiswa mukushanda masisitimu kutsiva iyo rejista yeGS kukosha kana kutonga kuchinjiswa kubva kune mushandisi nzvimbo kuenda kune yekushandisa system kernel (iyo GS kukosha iyo inoshandiswa munzvimbo yemushandisi inotsiviwa neiyo kukosha kunoshandiswa mukushanda kwe kernel).
Linux kernel muzvitoro zveGS per_cpu pointer, iyo inoshandiswa kuwana iyo kernel data, uye inonongedza kuTLS (Thread Yemunharaunda Kuchengetedza) munzvimbo yemushandisi
Kubvisa kukumbira kwakapetwa kweiyo SWAPGS kuraira mushure mekudzokororwa kernel kuwana kubva kune kernel nzvimbo kana kana uchiita kodhi isingade GS rejista kutsiva, cheki uye shanduko yemamiriro inoitwa pamberi pekurairwa.
Iyo yekufungidzira kuuraya mashandiro anotangira kuitwa kwekodhi pamwe neiyo SWAPGS kuraira, pasina kumirira mhedzisiro, uye kana bazi rakasarudzwa risina kusimbiswa, rinorasa mhedzisiro.
Naizvozvo, mamiriro anogona kusimuka kana bazi rinotsanangudza kuitwa kweSEAPGS rakasarudzwa nenzira yekufungidzira, asi panguva yekufungidzira kuitiswa kukosha kweiyo rejista yeGS kuchashandurwa nemirairo yeSWAPGS uye kunoshandiswa mumabasa anoenderana nendangariro akachengetedzwa neCPU.
Vatsvakurudzi vakaronga zviitiko zviviri zvekurwisa izvo izvo zvinoshandisa prototypes zvakagadzirirwa.
- Chiitiko chekutanga chinoenderana nemamiriro ezvinhu apo iyo SWAPGS kurairirwa kusingaitwe zvekufungidzira, kunyangwe ichishandiswa mukuita chaiko, uye yechipiri mamiriro akapesana, apo iyo SWAPGS kurairwa kunoitwa zvekufungidzira, kunyange zvisiri chaizvo.
- Pachiitiko chega chega, pane mairi maitiro ekushanda: anorwisa anogona kuona kukosha mune yakatarwa kero munzvimbo yepakati, uye anorwisa anogona kutsvaga yakatarwa kukosha mune asina kukodzera kero mukati.
Mhinduro yacho inoda kuiswa kweiyo kernel kugadzirisa pane ese makuru maitiro uye nharaunda dzevaenzi, ichiteverwa nesystem reboot. Kuti udzivise kuchengetedzwa muLinux, unogona kushandisa "nospectre_v1" sarudzo, iyo zvakare inoremadza matanho ekuvharira iyo SWAPGS kushomeka.
Mhinduro inowanikwa sechigamba cheLinux kernel, iyo yakatovemo mune dzimwe shanduro 4.19.65, 5.2.7, 4.14.137, 4.9.188 uye 4.4.188, nepo kwekuparadzirwa kwakasiyana kweLinux zvigadziriso zvichange zvichisvika panguva yeiyi uye vhiki rinotevera.