aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAge
...
* hundred-and-sixth pass: fuzz the unused bytes of the invoke ring structureuser2026-09-30
* hundred-and-fifth pass: no aperture validation on the command buffer, a fifth...user2026-09-30
* hundred-and-fourth pass: descriptor address alignment is enforceduser2026-09-30
* hundred-and-third pass: the pre-authentication image parser is cleanuser2026-09-30
* add a navigable summary to the memory-safety hunt loguser2026-09-30
* hundred-and-second pass: complete the corpus sweep across the full command rangeuser2026-09-30
* hundred-and-first pass: re-verify every claim against fresh evidenceuser2026-09-30
* hundredth pass: consolidate the denial-of-service family into a disclosure-re...user2026-09-30
* ninety-ninth pass: complete the full corpus sweep across 78 buildsuser2026-09-30
* ninety-eighth pass: over-declaring the command window causes no out-of-bounds...user2026-09-30
* ninety-seventh pass: corpus builds on hardware give a parameter-driven hang a...user2026-09-30
* ninety-sixth pass: verify the last named item and record the final evidence s...user2026-09-30
* ninety-fifth pass: correct the previous pass, the lifetime class is covered s...user2026-09-30
* ninety-fourth pass: handle and state-machine fuzz, negative but weakuser2026-09-30
* ninety-third pass: complete the deep randomized fuzz across the application setuser2026-09-30
* ninety-second pass: session slot churn at scale is cleanuser2026-09-30
* ninety-first pass: concurrent sessions show no cross-session state leakageuser2026-09-30
* ninetieth pass: session lifecycle and use-after-free probes, negativeuser2026-09-30
* eighty-ninth pass: characterise the last two unread GFX commands and TMR relo...user2026-09-30
* eighty-eighth pass: the image source is range-checked, sharpening the earlier...user2026-09-30
* eighty-seventh pass: the trusted-region range check is correct, no off-by-oneuser2026-09-30
* eighty-sixth pass: fuzz the load descriptor, find a third wedge and confirm a...user2026-09-30
* eighty-fifth pass: remove the harness invoke ceiling and fuzz far deeperuser2026-09-30
* eighty-fourth pass: the 1008-invoke wedge is our own ring bug, retracteduser2026-09-30
* eighty-third pass: per-field mutation fuzz, its one hit did not reproduceuser2026-09-30
* eighty-second pass: show the last untested application is inert, closing the gapuser2026-09-30
* eighty-first pass: close the void gap in the out-of-bounds testuser2026-09-30
* eightieth pass: hardware test for out-of-bounds writes into host memory, nega...user2026-09-30
* seventy-ninth pass: hardware disclosure search across ten applications, negativeuser2026-09-30
* seventy-eighth pass: classify the wedge on hardware, it is a hang not a faultuser2026-09-30
* seventy-seventh pass: rule out session-index dependence for the wedgeuser2026-09-30
* seventy-sixth pass: extended command surface clean, root cause still openuser2026-09-30
* seventy-fifth pass: complete the silicon sweep, wedge localised to one SYS_DR...user2026-09-30
* seventy-fourth pass: test the proposed root cause on hardware and falsify ituser2026-09-30
* seventy-third pass: root-cause candidate for the wedge, an unchecked length s...user2026-09-30
* seventy-second pass: hardware fuzz finds a host INVOKE that wedges the PSPuser2026-09-30
* seventy-first pass: hardware test of the reachability negativeuser2026-09-30
* seventieth pass: consolidate into a disclosure-ready report and index ituser2026-09-30
* sixty-ninth pass: version sweep shows the defect in all 31 distinct SYS_DRV b...user2026-09-30
* sixty-eighth pass: corpus-wide length question cannot be answered by heuristicuser2026-09-30
* sixty-seventh pass: sweep class 9 exhaustively, the defect family closes at twouser2026-09-30
* sixty-sixth pass: cross-function class 9 finds a second instance of the defectuser2026-09-30
* sixty-fifth pass: add a ninth detector class and find two more instances of t...user2026-09-30
* sixty-fourth pass: close the ASD service-id lead, no hidden second familyuser2026-09-30
* sixty-third pass: expand the ASD dispatcher map and flag a service-id mapping...user2026-09-30
* sixty-second pass: front-half survey completes negative, chain not host-reach...user2026-09-30
* sixty-first pass: refute two more front-half routes, leaving one liveuser2026-09-30
* sixtieth pass: refute the OC route and withdraw the previous pass's optimismuser2026-09-30
* fifty-ninth pass: find a non-auth-gated TA route to the chain's front halfuser2026-09-30
* fifty-eighth pass: identify the TA-side front half and the session gate it hitsuser2026-09-30
generated by cgit v1.3.1-sl0p (git 2.54.0) at 2026-11-07 01:28:46 +0000 — sl0p fork