Skip to content

Red-team smmu-wrong-stream needle: Soft-SMMU resolve_submit → WrongStream - #138

Merged
amineux merged 1 commit into
boss/smmu-not-mappedfrom
boss/smmu-wrong-stream
Sep 23, 2026
Merged

amineux merged 1 commit into
boss/smmu-not-mappedfrom
boss/smmu-wrong-stream

Conversation

@amineux

@amineux amineux commented Sep 23, 2026

Copy link
Copy Markdown
Owner

Summary

  • Round 9 KEEP 4: Soft-SMMU resolve_submit when armed submit_sid ≠ packet StreamId → MapError::WrongStream
  • Demo: set_sid(A) admits A; packet B → WrongStream; no-latch contrast → SubmitSid
  • Wire [redteam] attack=smmu-wrong-stream result=refused, Makefile, DILIGENCE, README

Stacked on #137 (boss/smmu-not-mapped).

Test plan

  • cargo test -p aether-core smmu_wrong_stream
  • cargo test -p aether-redteam
  • release clip greps attack=smmu-wrong-stream result=refused

…ream

Wire existing IommuMap::resolve_submit armed-SID≠packet path into make
red-team as [redteam] attack=smmu-wrong-stream result=refused. Matching
armed SID admits; no-latch contrast stays SubmitSid. Not Stage2Fault /
NotMapped / Overlap / StreamAbort.
@amineux
amineux force-pushed the boss/smmu-wrong-stream branch from 2b12a09 to ea84f77 Compare September 23, 2026 09:55
@amineux
amineux merged commit 999bf8a into boss/smmu-not-mapped Sep 23, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants