| Commit message (Expand) | Author | Age |
|---|
| * | LSB-zero ARM-mode re-entry: r8 is the one unswept gadget base, route 1 closed... | user | 2026-10-07 |
| * | Drive RAS on real silicon: the 0xE575B8 blocker is missing state, confirmed | user | 2026-09-23 |
| * | Measure ASD's four unmodelled SVCs from a real boot instead of fabricating them | user | 2026-09-23 |
| * | Cover ASD on the card's build: resolve its dispatcher and validate_ptr | user | 2026-09-23 |
| * | Add the card's own TAs and show HDCP/DTM findings reproduce on them | user | 2026-09-23 |
| * | Validate against real silicon: RAS matches the card, HDCP/DTM/ASD do not | user | 2026-09-23 |
| * | State where each gate model is applied, so check_range is not mistaken for live | user | 2026-09-23 |
| * | Model sOS's SVC permission gate: SVCs no longer succeed unconditionally | user | 2026-09-23 |
| * | Find that fuzz_asd's coverage rests on fabricated SVC returns | user | 2026-09-23 |
| * | Measure async dispatch and scheduling instead of assuming they are absent | user | 2026-09-23 |
| * | Model the sOS gate's region validation, and retract the DACR claim | user | 2026-09-23 |
| * | full_system: require TA liveness, not just "some blocks executed" | user | 2026-09-23 |
| * | full_system.py: sOS + SYS_DRV + all four TAs executing in one run | user | 2026-09-23 |
| * | EXPERIMENTAL: bridge TA service-1 RPCs into a real SYS_DRV (does not yet open... | user | 2026-09-23 |
| * | Trace RAS's init gate to a SYS_DRV RPC dependency | user | 2026-09-22 |
| * | DTM: fix a loader base error that made it undrivable; add dtm_ras.py | user | 2026-09-22 |
| * | fuzz_hdcp: model TA state persistence across commands (default on) | user | 2026-09-22 |
| * | Refresh the fidelity table: asd_validate_ptr fixed, crypto gap bounded | user | 2026-09-22 |
| * | RETRACT the unconditional "return-address control" claim in psp_emu/README.md | user | 2026-09-22 |
| * | Record that the repaired fuzz_sysdrv rediscovers a known latent defect | user | 2026-09-22 |
| * | ASD has no init phase; drop the redundant asd_feature_enabled patch | user | 2026-09-22 |
| * | Run the TA's real init and real session open instead of patching globals | user | 2026-09-22 |
| * | Fix fuzz_pss_differential's calling convention; parser is bounded and stricter | user | 2026-09-22 |
| * | Wire the Bus: HDCP's ASD RPCs now run in the real ASD dispatcher | user | 2026-09-22 |
| * | ASD loads, verifies and runs (harness/load_asd.py) | user | 2026-09-22 |
| * | Measured: the memref subtree is dead code in this configuration | user | 2026-09-22 |
| * | HDCP invoke ABI decoded: command lives in the shared buffer, not the ring | user | 2026-09-22 |
| * | Stop the boot harnesses running long after the work is done | user | 2026-09-22 |
| * | Initial import: AMD PSP reverse engineering, emulator and vulnerability research | Peter Geissler | 2026-09-22 |
