grift icon indicating copy to clipboard operation
grift copied to clipboard

investigate bugs found by imperas

Open benjaminselfridge opened this issue 5 years ago • 1 comments

bugs

benjaminselfridge avatar Dec 09 '20 21:12 benjaminselfridge

"GRIFT updates the RA register on an invalid jump (target address not 32 bit aligned on RV32I) before triggering an illegal instruction exception (which is incorrect, since illegal instruction should have no side effects). Furthermore, the RV32IMC compliance testing target has been incorrectly configured to RV32GC, thus floating point and atomic instructions are erroneously accepted as well. In addition, similar to VP, reserved non-hint compressed instructions are also erroneously accepted as legal instructions. Finally, we also found the bug that SC.W instruction performs memory access even without pending LR.W reservation (which was the only bug found by the official compliance test-suite)."

benjaminselfridge avatar Dec 09 '20 21:12 benjaminselfridge