The History of a Security Hole

(os2museum.com)

39 points | by st_goliath a month ago ago

2 comments

  • amabito a month ago

    IOPB bit semantics are inverted from what you might expect: 0 means permitted, 1 means denied. So zeroed pcb memory silently grants access to every port in range -- that's why this was consistently reproducible, not flaky. One sizeof() away from correct the whole time.

  • xoxxala a month ago

    (2018)