|
|
Another surface never touched, since every buffer in this audit was page-aligned while
firmware that assumes alignment and then masks or rounds an address can touch memory
outside the caller's region.
Testing with the aligned case as control, which loads and invokes cleanly with no stray
writes outside the declared region, every misaligned command buffer is rejected including
one that is still two-kilobyte aligned, and every misaligned image address fails
authentication because the header is read from the wrong offset. There is no rounding, no
masking and no write outside the region.
Alignment joins the boundary checks that are correctly enforced. Two genuinely untried
surfaces have now been tested in consecutive passes and both are clean, and the objective
is not met.
|
