Skip to content

Red-team smmu-not-mapped needle: Soft-SMMU Bound walk → NotMapped - #137

Merged
amineux merged 1 commit into
boss/smmu-overlapfrom
boss/smmu-not-mapped
Sep 23, 2026
Merged

amineux merged 1 commit into
boss/smmu-overlapfrom
boss/smmu-not-mapped

Conversation

@amineux

@amineux amineux commented Sep 23, 2026

Copy link
Copy Markdown
Owner

Summary

  • Round 9 KEEP 3: Soft-SMMU Bound SID walk/resolve with no S1 PTE → MapError::NotMapped
  • Demo: bind+pin admits; hole IOVA → NotMapped on walk and resolve_result
  • Wire [redteam] attack=smmu-not-mapped result=refused, Makefile, DILIGENCE, README

Stacked on #136 (boss/smmu-overlap). Retarget after merge.

Test plan

  • cargo test -p aether-core smmu_not_mapped
  • cargo test -p aether-redteam
  • release clip greps attack=smmu-not-mapped result=refused

Wire existing IommuMap::walk / resolve_result hole-on-bound-SID path into
make red-team as [redteam] attack=smmu-not-mapped result=refused. Mapped
IOVA admits; hole → NotMapped. Not WrongStream / Stage2Fault / StreamAbort /
SubmitSid / Overlap.
@amineux
amineux force-pushed the boss/smmu-not-mapped branch from 89a0ed5 to 0b07205 Compare September 23, 2026 09:55
@amineux
amineux merged commit 6397925 into boss/smmu-overlap Sep 23, 2026
3 checks passed
amineux added a commit that referenced this pull request Sep 24, 2026
Land orphaned Round 9 needles (#137–#140) onto main
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants