Hacker News Reader

Another question is whether it is actually exploitable from OS/i userspace.

Well, if you consider PASE lets you run AIX binaries, if it is exploitable on AIX the same exploit would probably work on IBM i. (PASE only supports a subset of AIX system calls though.)

Also, if it is exploitable from Java, nowadays the IBM i JVM is J9, almost the same as AIX. (This used to be different – the "Classic JVM" was integrated into the TIMI infrastructure, so quite different from JVMs on other platforms.)

I'm more interested in the non-PASE (more accurately, non-Teraspace) situation. The single level store maps every program into the same address space. Will POWER speculatively access another user's data before it discovers that the pointer is invalid or the array index is out of range?

Yes, it is an interesting case, I hope we get more detail than this paper soon.

Reply on news.ycombinator.com