index
:
amd-psp-re.git
main
AMD PSP reverse engineering, emulator and vulnerability research
git daemon user
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
psp_out
Mode
Name
Size
-rw-r--r--
ANALYSIS-HDCP-OVERFLOW-IS-DEFINITIVELY-DoS.md
3149
log
stats
plain
blame
-rw-r--r--
ANALYSIS-PSP-CODE-EXEC-AVENUES.md
9673
log
stats
plain
blame
-rw-r--r--
ANGLE-DISPLAY-SINK-INPUT-SURFACE.md
89372
log
stats
plain
blame
-rw-r--r--
ANGLE-EXTERNAL-INPUT-CHANNELS-RANKED.md
7365
log
stats
plain
blame
-rw-r--r--
ANGLE-PSP-AS-CONFUSED-DEPUTY-WRITER.md
7024
log
stats
plain
blame
-rw-r--r--
ANGLE-TA-KERNEL-SURFACE-CAPABILITY-BOUNDARY.md
10088
log
stats
plain
blame
-rw-r--r--
ARCH-INSIGHTS-FROM-AMD-SP-SOURCE.md
5136
log
stats
plain
blame
-rw-r--r--
ARCH-INSIGHTS-FROM-DAYZEROSEC-POSTS.md
11501
log
stats
plain
blame
-rw-r--r--
ARCH-INSIGHTS-FROM-STALEUS-PAPER.md
10735
log
stats
plain
blame
-rw-r--r--
ARCH-SMN-APERTURE-PRIVILEGE.md
11366
log
stats
plain
blame
-rw-r--r--
ASD-REACHABLE-AUDIT.md
9464
log
stats
plain
blame
-rw-r--r--
ATTACK-SURFACE.md
51691
log
stats
plain
blame
-rw-r--r--
AUDIT-ASD-LINK-OPS-VENEERS.md
2725
log
stats
plain
blame
-rw-r--r--
AUDIT-ASD-REACHABLE-COMPLETE.md
9468
log
stats
plain
blame
-rw-r--r--
AUDIT-OBJECT-LIFETIME-AND-STATE.md
7986
log
stats
plain
blame
-rw-r--r--
AUDIT-ROUND-NEW-VULN-HUNT.md
5308
log
stats
plain
blame
-rw-r--r--
AUDIT-ROUND-RAS-DTM-SYSDRV.md
11667
log
stats
plain
blame
-rw-r--r--
AUDIT-SMU-I2C-NUMCMDS.md
3055
log
stats
plain
blame
-rw-r--r--
AUDIT-SOS-SRC-POINTER-TOCTOU.md
4039
log
stats
plain
blame
-rw-r--r--
AUDIT-TA-KERNEL-BOUNDARY.md
5813
log
stats
plain
blame
-rw-r--r--
AUDIT-TEE-PARAM-MARSHALLING.md
2529
log
stats
plain
blame
-rw-r--r--
BUG-TINYGRAD-PSP-RING-NO-WRAP.md
3571
log
stats
plain
blame
-rw-r--r--
CARD-STATE-ACCESS-INVENTORY.md
6834
log
stats
plain
blame
-rw-r--r--
CLOSURES-VERSION-DIFF-ARC.md
2682
log
stats
plain
blame
-rw-r--r--
CONFIRMED-FIRMWARE-ROLLBACK-WORKS.md
4491
log
stats
plain
blame
-rw-r--r--
CONSTRAINTS.md
5518
log
stats
plain
blame
-rw-r--r--
CRASH-RECORD.md
4018
log
stats
plain
blame
-rw-r--r--
DISCLOSURE-SUMMARY.md
24091
log
stats
plain
blame
-rw-r--r--
DISTINCT-WRITE-HUNT.md
15782
log
stats
plain
blame
-rw-r--r--
FINDING-ASD-0x403-UNBOUNDED-TABLE-INDEX.md
6508
log
stats
plain
blame
-rw-r--r--
FINDING-ASD-IS-DRIVER-CLASS-NOT-INVOKABLE.md
2287
log
stats
plain
blame
-rw-r--r--
FINDING-ASD-SVC-STUBS-LOAD-BEARING.md
5757
log
stats
plain
blame
-rw-r--r--
FINDING-ASD-VERSION-HISTORY-AND-ENCODER-BOUND.md
2462
log
stats
plain
blame
-rw-r--r--
FINDING-CONTAINER-SIGNATURE-FORMAT-AND-KEYRING.md
8311
log
stats
plain
blame
-rw-r--r--
FINDING-CORRECTED-GUARD-SWEEP-COMPLETE.md
3295
log
stats
plain
blame
-rw-r--r--
FINDING-DF-FLASH-APERTURE-HOST-READABLE.md
3686
log
stats
plain
blame
-rw-r--r--
FINDING-DRAM-PROTECT-ONLY-ENFORCED-IF-HOST-DECLARES-IT.md
6967
log
stats
plain
blame
-rw-r--r--
FINDING-DTM-SNAPSHOT-ADDED-AFTER-OUR-BUILD.md
3741
log
stats
plain
blame
-rw-r--r--
FINDING-FEATURE-MASK-GET-UNBOUNDED-INDEX.md
8549
log
stats
plain
blame
-rw-r--r--
FINDING-FIRMWARE-CORPUS-WAS-40-PERCENT-COMPLETE.md
6089
log
stats
plain
blame
-rw-r--r--
FINDING-FULL-SOS-BOOT-IN-EMULATOR.md
20707
log
stats
plain
blame
-rw-r--r--
FINDING-HDCP-VERSION-HISTORY-NEGATIVE.md
2604
log
stats
plain
blame
-rw-r--r--
FINDING-HOST-MAILBOX-AND-RING-IN-EMULATOR.md
52743
log
stats
plain
blame
-rw-r--r--
FINDING-HOST-READ-SLWR-AND-SYSHUB.md
9277
log
stats
plain
blame
-rw-r--r--
FINDING-IFWI-PARSER-FUZZ.md
3028
log
stats
plain
blame
-rw-r--r--
FINDING-IFWI-WRAP-CONFIRMED-IN-EMULATOR.md
6208
log
stats
plain
blame
-rw-r--r--
FINDING-LIVE-VERSION-IS-53-NOT-54.md
13198
log
stats
plain
blame
-rw-r--r--
FINDING-LOADIPFW-VCN-REGWRITE.md
5553
log
stats
plain
blame
-rw-r--r--
FINDING-LOADTA-ADDRESS-CLASSIFICATION-ORACLE.md
6162
log
stats
plain
blame
-rw-r--r--
FINDING-NO-CONSUMABLE-CORRUPTION-ANYWHERE.md
3105
log
stats
plain
blame
-rw-r--r--
FINDING-NO-PSP-MEMORY-APERTURE.md
3047
log
stats
plain
blame
-rw-r--r--
FINDING-PSS-PARSER-DIFFERENTIAL.md
4370
log
stats
plain
blame
-rw-r--r--
FINDING-RAS-INJECT-TMR-PROTECTION-IS-CORRECT.md
2563
log
stats
plain
blame
-rw-r--r--
FINDING-RAS-IS-REACHABLE-AND-AUDITED.md
2743
log
stats
plain
blame
-rw-r--r--
FINDING-RING-LOADTA-WORKS-RAS-SPECIFIC-FAILURE.md
10493
log
stats
plain
blame
-rw-r--r--
FINDING-ROUTEC-WINDOW-IDENTIFIED.md
10633
log
stats
plain
blame
-rw-r--r--
FINDING-SLWR-ALLOWLIST-EXTRACTED.md
11807
log
stats
plain
blame
-rw-r--r--
FINDING-SMU-MAILBOX-HOST-REACHABLE.md
4800
log
stats
plain
blame
-rw-r--r--
FINDING-SMUIO-AND-UNKNOWN-BASES.md
3251
log
stats
plain
blame
-rw-r--r--
FINDING-SOS-AND-TAS-BOOT-IN-EMULATOR.md
12288
log
stats
plain
blame
-rw-r--r--
FINDING-SOS-CCP-WINDOW-FIXED-IN-54.md
12981
log
stats
plain
blame
-rw-r--r--
FINDING-SOS-RING-EMULATION-AND-3137-SKIP.md
6321
log
stats
plain
blame
-rw-r--r--
FINDING-SYSDRV-ACL-RANGE-TABLE.md
4556
log
stats
plain
blame
-rw-r--r--
FINDING-SYSDRV-CHIPLET-UNBOUNDED-INDEX.md
4070
log
stats
plain
blame
-rw-r--r--
FINDING-SYSDRV-SHAREDMEM-RANGE-FIXED-IN-54.md
7791
log
stats
plain
blame
-rw-r--r--
FINDING-SYSDRV-VCCC-DOUBLEFETCH-UNDERFLOW.md
18548
log
stats
plain
blame
-rw-r--r--
FINDING-TMR-FENCE-IS-TAG-AGNOSTIC.md
6230
log
stats
plain
blame
-rw-r--r--
FINDING-TOCTOU-SEARCH.md
12928
log
stats
plain
blame
-rw-r--r--
FINDING-TSU-CHAIN-E2E-IN-EMULATOR.md
25515
log
stats
plain
blame
-rw-r--r--
FINDING-TSU-MAILBOX-HOST-REACHABLE.md
3291
log
stats
plain
blame
-rw-r--r--
FINDING-UMC-NOT-REACHABLE-VIA-SMN.md
8444
log
stats
plain
blame
-rw-r--r--
FINDING-VCN-GATE-OPENS-VIA-SMU-POWERUP.md
37596
log
stats
plain
blame
-rw-r--r--
FINDINGS-SUMMARY.md
14495
log
stats
plain
blame
-rw-r--r--
FINDINGS.md
10864
log
stats
plain
blame
-rw-r--r--
FIRMWARE-COVERAGE-MATRIX.md
9731
log
stats
plain
blame
-rw-r--r--
FIRMWARE-INVENTORY.md
22719
log
stats
plain
blame
-rw-r--r--
FUZZING-EMULATED.md
21031
log
stats
plain
blame
-rw-r--r--
FUZZING-RESULTS.md
2511
log
stats
plain
blame
-rw-r--r--
GFX-HANDLER-COVERAGE.md
15103
log
stats
plain
blame
-rw-r--r--
GUARD-INIT-CHAIN.md
25262
log
stats
plain
blame
-rw-r--r--
HANG-FREE-OVERFLOW-LEAD.md
4560
log
stats
plain
blame
-rw-r--r--
HANG-ROOT-CAUSE.md
13691
log
stats
plain
blame
-rw-r--r--
HARNESS-TA-FUZZING-CORRECTIONS.md
4494
log
stats
plain
blame
-rw-r--r--
HDCP-LIFECYCLE-AUDIT.md
3228
log
stats
plain
blame
-rw-r--r--
HDCP-TA-AUDIT.md
3301
log
stats
plain
blame
-rw-r--r--
HUNT-HOST-REACHABLE-HEAP-CORRUPTION.md
25908
log
stats
plain
blame
-rw-r--r--
HW-RAS-ON-CARD.md
4334
log
stats
plain
blame
-rw-r--r--
HW-TA-VERSION-REPRODUCTION.md
6982
log
stats
plain
blame
-rw-r--r--
HW-VALIDATION-RX7900XTX.md
6136
log
stats
plain
blame
-rw-r--r--
INDEX.md
64536
log
stats
plain
blame
-rw-r--r--
LATENT-ASD-ENCODER-STATE-CHECK-UNBOUNDED-INDEX.md
9368
log
stats
plain
blame
-rw-r--r--
LATENT-RAS-PARAM-ARRAY-OOB.md
6220
log
stats
plain
blame
-rw-r--r--
LEAD-FUSE-DEBUG-REACHABILITY-ROUND1.md
5530
log
stats
plain
blame
-rw-r--r--
LEAD-STAGE2-TASK-BLOCKED-ON-UNMAPPED-20A000.md
7253
log
stats
plain
blame
-rw-r--r--
LEAD-SYSDRV-DMA-TRANSFER-CLIENT-BUFFER.md
8267
log
stats
plain
blame
-rw-r--r--
LEAD-SYSDRV-FUSE-DEBUG-DMA-SURFACE.md
3989
log
stats
plain
blame
-rw-r--r--
LEAD-SYSDRV-LOADIPFW-DOUBLEFETCH.md
9189
log
stats
plain
blame
-rw-r--r--
LEAD-TRNG-CANARY-PREDICTION.md
9314
log
stats
plain
blame
-rw-r--r--
MEC-PM4-FOOTHOLD.md
40922
log
stats
plain
blame
-rw-r--r--
METHODOLOGY-INLINING-VS-ADDED-GUARDS.md
3364
log
stats
plain
blame
-rw-r--r--
NEW-AREAS-ROUND.md
5625
log
stats
plain
blame
-rw-r--r--
NEXT-ASD-OLD-BUILD-TARGETS.md
5126
log
stats
plain
blame
-rw-r--r--
NV22-MEMMAP-MINED.md
5374
log
stats
plain
blame
-rw-r--r--
OBSERVATION-SESSION-TABLE-REDZONE-UNDER-REAL-INIT.md
7237
log
stats
plain
blame
-rw-r--r--
OBSERVATION-SYSDRV-3141-NULL-PTR-NONZERO-LEN.md
3870
log
stats
plain
blame
-rw-r--r--
ORPHAN-CODE-SWEEP.md
3835
log
stats
plain
blame
-rw-r--r--
OVERFLOW-SURFACE-AUDIT.md
4379
log
stats
plain
blame
-rw-r--r--
PARSER-SURFACE-FROM-BUGS.md
3871
log
stats
plain
blame
-rw-r--r--
PHASE2-PORT-RESULTS.md
5562
log
stats
plain
blame
-rw-r--r--
PHASE5-TRIAGE-RESULTS.md
3923
log
stats
plain
blame
-rw-r--r--
PLAN-BOOT-WINDOW-ROMSW.md
4598
log
stats
plain
blame
-rw-r--r--
PLAN-COMPLETE-VERSION-DIFF.md
4770
log
stats
plain
blame
-rw-r--r--
READ-PRIMITIVE-HUNT-HDCP.md
11673
log
stats
plain
blame
-rw-r--r--
RERATE-ROUTEC-TARGET-MAY-BE-VCN.md
7833
log
stats
plain
blame
-rw-r--r--
RESOLUTION-DUAL-BIOS.md
4239
log
stats
plain
blame
-rw-r--r--
REVIEW-NEW-ROUTE-A-B.md
7163
log
stats
plain
blame
-rw-r--r--
REVIEW-OPEN-THREADS.md
13817
log
stats
plain
blame
-rw-r--r--
RING-FRAME-FIELD-MAP.md
3243
log
stats
plain
blame
-rw-r--r--
ROUND3-FINDINGS.md
6317
log
stats
plain
blame
-rw-r--r--
SERVICE1-CRYPTO-ANALYSIS.md
17082
log
stats
plain
blame
-rw-r--r--
SESSION-NEWPRIMITIVE-HUNT.md
6164
log
stats
plain
blame
-rw-r--r--
SMN-MAP-HEALTHY-CARD.md
14336
log
stats
plain
blame
-rw-r--r--
SOURCE-AMD-SP-TREE-WHAT-IT-GIVES-US.md
3622
log
stats
plain
blame
-rw-r--r--
STATE-CONFUSION-AUDIT.md
3278
log
stats
plain
blame
-rw-r--r--
STRATEGY-MEASUREMENT-FIRST.md
9450
log
stats
plain
blame
-rw-r--r--
SUBCMD12-RESOLVED.md
3535
log
stats
plain
blame
-rw-r--r--
SURFACE-SDMA-RLC-IMU.md
2269
log
stats
plain
blame
-rw-r--r--
SVC-OVERVIEW.md
9545
log
stats
plain
blame
-rw-r--r--
SYNTHESIS-CROSS-FINDING-COMPOUNDS.md
8019
log
stats
plain
blame
-rw-r--r--
SYSDRV-ALL-HANDLERS.dump
229497
log
stats
plain
blame
-rw-r--r--
TA-CODE-EXEC-ANALYSIS.md
5920
log
stats
plain
blame
-rw-r--r--
TOOLING-EMITTER-SCAN-FIX.md
2664
log
stats
plain
blame
-rw-r--r--
VCN-FIRMWARE-FOOTHOLD.md
11560
log
stats
plain
blame
-rw-r--r--
VERSION-AUDIT-STATUS.md
18899
log
stats
plain
blame
-rw-r--r--
VULN-ASD-202-CANARY-LEAK.md
13473
log
stats
plain
blame
-rw-r--r--
VULN-ASD-308-BYPASS.md
17748
log
stats
plain
blame
-rw-r--r--
VULN-ASD-308-REACHABLE.md
9347
log
stats
plain
blame
-rw-r--r--
VULN-ASD-SRM-V9-WALKER-OOB-READ.md
5365
log
stats
plain
blame
-rw-r--r--
VULN-ASD-SRM-WALKER-OOB-READ.md
7847
log
stats
plain
blame
-rw-r--r--
VULN-AUDIT-WHAT-WE-ACTUALLY-HAVE.md
28468
log
stats
plain
blame
-rw-r--r--
VULN-CONFIRMED-TMR-RANGE-ROLLBACK.md
22374
log
stats
plain
blame
-rw-r--r--
VULN-HDCP-BRANCHB-HANGFREE-OOB.md
7496
log
stats
plain
blame
-rw-r--r--
VULN-HDCP-SESSION-STATE-BYPASS.md
23110
log
stats
plain
blame
-rw-r--r--
VULN-HDCP-TA-STACK-OVERFLOW.md
8264
log
stats
plain
blame
-rw-r--r--
VULN-LOADIPFW-UNSIGNED-REGWRITE.md
15280
log
stats
plain
blame
-rw-r--r--
VULN-SOS-PROCSWITCH-MSG-HEADROOM.md
6136
log
stats
plain
blame
-rw-r--r--
VULN-SYSDRV-3103-OVERFLOW.md
19412
log
stats
plain
blame
-rw-r--r--
VULN-SYSDRV-HEAP-OVERFLOW-COPYSTATE.md
10573
log
stats
plain
blame
-rw-r--r--
WRITE-PRIMITIVE.md
3730
log
stats
plain
blame
-rw-r--r--
access_inventory.py
3445
log
stats
plain
blame
-rw-r--r--
annotate_hdcp.py
3962
log
stats
plain
blame
-rw-r--r--
asd2.elf
212992
log
stats
plain
blame
-rw-r--r--
asd_code.bin
208896
log
stats
plain
blame
-rw-r--r--
asd_full.bin
209152
log
stats
plain
blame
-rw-r--r--
atx_cycle_and_clear.py
3215
log
stats
plain
blame
-rw-r--r--
atx_race.py
2836
log
stats
plain
blame
-rw-r--r--
bisect_bound.py
1637
log
stats
plain
blame
-rw-r--r--
catch_and_clear_marker.py
2023
log
stats
plain
blame
-rw-r--r--
check_procswitch_headroom.py
3324
log
stats
plain
blame
-rw-r--r--
check_retractions.py
6519
log
stats
plain
blame
-rw-r--r--
consume_scan.py
3160
log
stats
plain
blame
-rw-r--r--
craft_leak_image.py
3426
log
stats
plain
blame
-rw-r--r--
crafted_leak.bin
2097152
log
stats
plain
blame
-rw-r--r--
crashmap.py
2818
log
stats
plain
blame
-rw-r--r--
dce_survey.py
2342
log
stats
plain
blame
-rw-r--r--
df_cfg_probe.py
2739
log
stats
plain
blame
-rw-r--r--
df_flash_window.py
1927
log
stats
plain
blame
-rw-r--r--
df_psp_probe.py
2602
log
stats
plain
blame
-rw-r--r--
df_survey.py
1690
log
stats
plain
blame
-rw-r--r--
dfscan.py
3026
log
stats
plain
blame
-rw-r--r--
dfscan2.py
6563
log
stats
plain
blame
-rw-r--r--
dfscan3.py
7715
log
stats
plain
blame
-rw-r--r--
dfscan4.py
8951
log
stats
plain
blame
-rw-r--r--
diff_asd.py
3114
log
stats
plain
blame
-rw-r--r--
diff_versions.py
3074
log
stats
plain
blame
-rw-r--r--
display_core_bringup.py
4213
log
stats
plain
blame
d---------
drivers
213
log
stats
plain
-rw-r--r--
dtm.elf
12288
log
stats
plain
blame
-rw-r--r--
dtm2.elf
12288
log
stats
plain
blame
-rw-r--r--
dtm_code.bin
8192
log
stats
plain
blame
-rw-r--r--
dtm_full.bin
8448
log
stats
plain
blame
d---------
elf
2541
log
stats
plain
-rw-r--r--
emitscan.py
2282
log
stats
plain
blame
-rw-r--r--
explain_discovery.py
2174
log
stats
plain
blame
-rw-r--r--
exploit_asd308_bypass.py
3559
log
stats
plain
blame
-rw-r--r--
exploit_branchB_oob.py
5140
log
stats
plain
blame
-rw-r--r--
exploit_hdcp_oob.py
4545
log
stats
plain
blame
-rw-r--r--
extract_sigs.py
2570
log
stats
plain
blame
-rw-r--r--
f32_probe.py
4846
log
stats
plain
blame
-rw-r--r--
faultcheck.py
1111
log
stats
plain
blame
-rw-r--r--
find_discovery.py
2415
log
stats
plain
blame
-rw-r--r--
flash_BIOS1_STUCK_20260917.bin
2097152
log
stats
plain
blame
-rw-r--r--
flash_BIOS2_KNOWNGOOD_20260917.bin
2097152
log
stats
plain
blame
d---------
flash_fw
236
log
stats
plain
-rw-r--r--
flash_live_diff.py
2048
log
stats
plain
blame
-rw-r--r--
fuse_reach.py
3208
log
stats
plain
blame
-rw-r--r--
fuzz_0f_struct.py
5272
log
stats
plain
blame
-rw-r--r--
fuzz_campaign.py
4809
log
stats
plain
blame
-rw-r--r--
fuzz_gfx_lens.py
4268
log
stats
plain
blame
-rw-r--r--
fuzz_gfx_ring.py
5419
log
stats
plain
blame
-rw-r--r--
fuzz_hdcp_10_13.py
4839
log
stats
plain
blame
-rw-r--r--
fuzz_one_cmd.py
3352
log
stats
plain
blame
-rw-r--r--
fuzz_ras.py
4264
log
stats
plain
blame
-rw-r--r--
fuzz_ras_trigger.py
4210
log
stats
plain
blame
-rw-r--r--
fuzz_ta_deep.py
4756
log
stats
plain
blame
-rw-r--r--
fuzz_ta_invoke.py
4326
log
stats
plain
blame
-rw-r--r--
fwdbg.py
2913
log
stats
plain
blame
-rw-r--r--
gc_11_0_0_imu.bin
132352
log
stats
plain
blame
-rw-r--r--
gc_11_0_0_rlc.bin
185376
log
stats
plain
blame
-rw-r--r--
gcp_playready_certchain.xml
6438
log
stats
plain
blame
-rw-r--r--
gfxanom_01_r5.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxanom_01_r9.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxanom_04_r10.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxanom_0c_r8.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxanom_10000_r7.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxanom_22_r6.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_00_r38.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_01_r12.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_01_r13.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_01_r5.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_01_r9.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_02_r11.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_02_r14.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_02_r15.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_02_r2.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_02_r3.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_03_r35.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_04_r1.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_04_r10.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_04_r20.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_04_r24.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_0c_r8.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_0d_r31.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_0e_r84.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_0f_r55.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_10000_r7.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_11_r140.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_17_r186.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_1f_r71.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_20_r22.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_20_r23.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_22_r16.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_22_r17.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_22_r4.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_22_r6.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_23_r19.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_23_r21.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_26_r34.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_27_r33.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_28_r18.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_3f_r41.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_f0000_r0.bin
1024
log
stats
plain
blame
-rw-r--r--
gfxleak_ff_r65.bin
1024
log
stats
plain
blame
-rw-r--r--
guard_delta.py
2155
log
stats
plain
blame
-rw-r--r--
guard_sweep.py
2258
log
stats
plain
blame
d---------
handlers
202
log
stats
plain
d---------
handover
369
log
stats
plain
-rw-r--r--
hang_iso_cmd03.bin
32768
log
stats
plain
blame
-rw-r--r--
hang_payload_cmd02.bin
32768
log
stats
plain
blame
-rw-r--r--
hang_seq_cmd03.bin
32768
log
stats
plain
blame
-rw-r--r--
hdcp2.elf
32768
log
stats
plain
blame
-rw-r--r--
hdcp_annotated_bundle.c
13665
log
stats
plain
blame
-rw-r--r--
hdcp_code.bin
28672
log
stats
plain
blame
-rw-r--r--
hdcp_full.bin
28928
log
stats
plain
blame
-rw-r--r--
hdcp_subcmd12_rxinfo_annotated.c
6471
log
stats
plain
blame
-rw-r--r--
heap_copystate_params.py
2225
log
stats
plain
blame
-rw-r--r--
hunt_leak_0f.py
5024
log
stats
plain
blame
-rw-r--r--
hunt_leak_0f2.py
4992
log
stats
plain
blame
-rw-r--r--
hunt_psp_disclosure.py
4530
log
stats
plain
blame
-rw-r--r--
hunt_psp_memory_aperture.py
2437
log
stats
plain
blame
-rw-r--r--
hunt_uninit_0f.py
3860
log
stats
plain
blame
d---------
hw
230
log
stats
plain
-rw-r--r--
ifwi_parse_model.py
6653
log
stats
plain
blame
-rw-r--r--
import_sos_symbols.py
3014
log
stats
plain
blame
-rw-r--r--
ip_map.py
2060
log
stats
plain
blame
-rw-r--r--
lma_probe.py
1702
log
stats
plain
blame
-rw-r--r--
load_ta.py
4966
log
stats
plain
blame
-rw-r--r--
measure_ta_outputs.py
3168
log
stats
plain
blame
-rw-r--r--
mec_11_0_0.bin
406528
log
stats
plain
blame
-rw-r--r--
mec_11_0_0.elf
410368
log
stats
plain
blame
-rw-r--r--
mec_ucode.bin
406272
log
stats
plain
blame
-rw-r--r--
mkelf.py
1491
log
stats
plain
blame
-rw-r--r--
mkelf_riscv.py
1685
log
stats
plain
blame
-rw-r--r--
mkelf_xtensa.py
1575
log
stats
plain
blame
-rw-r--r--
mmio_map.py
4012
log
stats
plain
blame
-rw-r--r--
mmio_table.py
3555
log
stats
plain
blame
-rw-r--r--
moddis.py
1766
log
stats
plain
blame
d---------
new
146
log
stats
plain
-rw-r--r--
novel_dtm_02_10263.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_02_10264.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_02_2147483648.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_02_24.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_02_255.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_02_33.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_02_62.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_02_65535.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_02_8.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_03_10264.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_03_2147483647.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_03_25.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_03_256.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_03_3.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_03_32.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_03_4294967294.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_03_5121.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_04_10264.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_04_24.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_04_32.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_04_4.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_04_65536.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_dtm_04_8.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_hdcp_0f_0.bin
32768
log
stats
plain
blame
-rw-r--r--
novel_hdcp_0f_21.bin
32768
log
stats
plain
blame
-rw-r--r--
outlier_0f_r1344_in.bin
32768
log
stats
plain
blame
-rw-r--r--
outlier_0f_r1344_out.bin
32768
log
stats
plain
blame
-rw-r--r--
outlier_0f_r2048_in.bin
32768
log
stats
plain
blame
-rw-r--r--
outlier_0f_r2048_out.bin
32768
log
stats
plain
blame
-rw-r--r--
outlier_0f_r2240_in.bin
32768
log
stats
plain
blame
-rw-r--r--
outlier_0f_r2240_out.bin
32768
log
stats
plain
blame
-rw-r--r--
outlier_0f_r3392_in.bin
32768
log
stats
plain
blame
-rw-r--r--
outlier_0f_r3392_out.bin
32768
log
stats
plain
blame
-rw-r--r--
phase1_build_idbs.py
1830
log
stats
plain
blame
-rw-r--r--
phase1_coverage.json
6631
log
stats
plain
blame
-rw-r--r--
phase2_port.json
2422
log
stats
plain
blame
-rw-r--r--
phase2_port_symbols.py
7786
log
stats
plain
blame
d---------
phase3
2127
log
stats
plain
-rw-r--r--
phase3_decompile.py
3033
log
stats
plain
blame
-rw-r--r--
phase4_diff.py
3365
log
stats
plain
blame
-rw-r--r--
phase4_diffs.json
7841
log
stats
plain
blame
-rw-r--r--
phase5_triage.py
2171
log
stats
plain
blame
-rw-r--r--
phase6_dump_c.py
2134
log
stats
plain
blame
-rw-r--r--
poc_asd202_canary_leak.py
1581
log
stats
plain
blame
-rw-r--r--
poc_asd202_leak_sentinels.py
1617
log
stats
plain
blame
-rw-r--r--
poc_srm_v9_walker_oob.py
4354
log
stats
plain
blame
-rw-r--r--
poc_srm_walker_oob.py
5116
log
stats
plain
blame
-rw-r--r--
probe_asd308_cf.py
3354
log
stats
plain
blame
-rw-r--r--
probe_asd308_fptr.py
3405
log
stats
plain
blame
-rw-r--r--
probe_asd308_window.py
2803
log
stats
plain
blame
-rw-r--r--
probe_asd308_writebranch.py
2273
log
stats
plain
blame
-rw-r--r--
probe_asd_308.py
3454
log
stats
plain
blame
-rw-r--r--
probe_asd_308_gate.py
3903
log
stats
plain
blame
-rw-r--r--
probe_asd_as_ta.py
3091
log
stats
plain
blame
-rw-r--r--
probe_asd_direct_invoke.py
3605
log
stats
plain
blame
-rw-r--r--
probe_attestation.py
3443
log
stats
plain
blame
-rw-r--r--
probe_branchB.py
5334
log
stats
plain
blame
-rw-r--r--
probe_bss_overflow.py
4931
log
stats
plain
blame
-rw-r--r--
probe_bss_proof.py
4004
log
stats
plain
blame
-rw-r--r--
probe_c2p_mailbox.py
3193
log
stats
plain
blame
-rw-r--r--
probe_canaryfill.py
4144
log
stats
plain
blame
-rw-r--r--
probe_fuzz1.py
4607
log
stats
plain
blame
-rw-r--r--
probe_fuzz2.py
3547
log
stats
plain
blame
-rw-r--r--
probe_gate.py
2315
log
stats
plain
blame
-rw-r--r--
probe_hang_faultscan.py
4819
log
stats
plain
blame
-rw-r--r--
probe_i2c_baseline.py
1997
log
stats
plain
blame
-rw-r--r--
probe_i2c_numcmds_timing.py
2545
log
stats
plain
blame
-rw-r--r--
probe_invoke_exhaust.py
3057
log
stats
plain
blame
-rw-r--r--
probe_loadipfw_smallsize.py
2585
log
stats
plain
blame
-rw-r--r--
probe_magic_tamper.py
3027
log
stats
plain
blame
-rw-r--r--
probe_ras.py
2941
log
stats
plain
blame
-rw-r--r--
probe_ras_resp.py
2442
log
stats
plain
blame
-rw-r--r--
probe_routec_regwrite.py
4426
log
stats
plain
blame
-rw-r--r--
probe_smn_read_routec.py
2723
log
stats
plain
blame
-rw-r--r--
probe_smu_confused_deputy.py
3666
log
stats
plain
blame
-rw-r--r--
probe_smu_dma_addr.py
3650
log
stats
plain
blame
-rw-r--r--
probe_smu_dram2smu_fuzz.py
3718
log
stats
plain
blame
-rw-r--r--
probe_smu_i2c_numcmds.py
3857
log
stats
plain
blame
-rw-r--r--
probe_smu_index_fuzz.py
3045
log
stats
plain
blame
-rw-r--r--
probe_smu_mailbox.py
2454
log
stats
plain
blame
-rw-r--r--
probe_smu_voltage_oob.py
2429
log
stats
plain
blame
-rw-r--r--
probe_smu_workload_index.py
2085
log
stats
plain
blame
-rw-r--r--
probe_stateconf.py
4028
log
stats
plain
blame
-rw-r--r--
probe_ta_load_exhaust.py
2119
log
stats
plain
blame
-rw-r--r--
probe_ta_session_uaf.py
3964
log
stats
plain
blame
-rw-r--r--
probe_tmr_base_sweep.py
3857
log
stats
plain
blame
-rw-r--r--
probe_tmr_fence.py
2760
log
stats
plain
blame
-rw-r--r--
probe_tmr_footprint.py
3376
log
stats
plain
blame
-rw-r--r--
probe_tmr_writes_real.py
3635
log
stats
plain
blame
-rw-r--r--
probe_tsu_mailbox.py
2931
log
stats
plain
blame
-rw-r--r--
probe_tsu_readoracle.py
3236
log
stats
plain
blame
-rw-r--r--
probe_vccc_0x26.py
2934
log
stats
plain
blame
-rw-r--r--
probe_vccc_control.py
1698
log
stats
plain
blame
-rw-r--r--
psp_liveness_evidence.py
3280
log
stats
plain
blame
-rw-r--r--
psp_recover.py
683
log
stats
plain
blame
-rw-r--r--
pte_attr_probe.py
3446
log
stats
plain
blame
-rw-r--r--
race_flash_sector.py
1587
log
stats
plain
blame
-rw-r--r--
ras2.elf
28672
log
stats
plain
blame
-rw-r--r--
ras_code.bin
24576
log
stats
plain
blame
-rw-r--r--
ras_full.bin
24832
log
stats
plain
blame
-rw-r--r--
rasdis.py
1712
log
stats
plain
blame
-rw-r--r--
regguard.py
11322
log
stats
plain
blame
-rw-r--r--
replay_outlier.py
3062
log
stats
plain
blame
-rw-r--r--
repro_hang.py
2589
log
stats
plain
blame
-rw-r--r--
repro_seq_123.py
3711
log
stats
plain
blame
-rw-r--r--
retry_link.py
691
log
stats
plain
blame
-rw-r--r--
rsmu_survey.py
3659
log
stats
plain
blame
-rw-r--r--
rw_diff.py
1165
log
stats
plain
blame
-rw-r--r--
rw_test.py
2648
log
stats
plain
blame
-rw-r--r--
scan_bootstage_regs.py
2197
log
stats
plain
blame
d---------
scratch
650
log
stats
plain
-rw-r--r--
sdma_6_0_0.bin
34560
log
stats
plain
blame
-rw-r--r--
sdma_prev.bin
34560
log
stats
plain
blame
-rw-r--r--
signscan.py
5307
log
stats
plain
blame
d---------
sigs
1569
log
stats
plain
-rw-r--r--
slwr_hostread.py
5694
log
stats
plain
blame
-rw-r--r--
slwr_parse.py
3890
log
stats
plain
blame
-rw-r--r--
smn_ipbases.py
2991
log
stats
plain
blame
-rw-r--r--
smn_name.py
2417
log
stats
plain
blame
-rw-r--r--
smn_probe.py
4095
log
stats
plain
blame
-rw-r--r--
smn_probe2.py
2630
log
stats
plain
blame
-rw-r--r--
smn_survey.py
3340
log
stats
plain
blame
-rw-r--r--
smn_sweep.py
1343
log
stats
plain
blame
d---------
smu_fw
275
log
stats
plain
-rw-r--r--
smuio_and_unknowns.py
3182
log
stats
plain
blame
-rw-r--r--
sos2.elf
103040
log
stats
plain
blame
-rw-r--r--
sos_code.bin
98944
log
stats
plain
blame
-rw-r--r--
sos_full.bin
99200
log
stats
plain
blame
-rw-r--r--
sos_symbols.json
58108
log
stats
plain
blame
-rw-r--r--
spiflash.bin
2097152
log
stats
plain
blame
-rw-r--r--
sub_402A88_decompiled.c
8444
log
stats
plain
blame
-rw-r--r--
svcscan.py
1591
log
stats
plain
blame
-rw-r--r--
sys_drv2.elf
165520
log
stats
plain
blame
-rw-r--r--
sys_drv_code.bin
161424
log
stats
plain
blame
-rw-r--r--
ta_raw.bin
271616
log
stats
plain
blame
-rw-r--r--
test_encoder_oob.py
3693
log
stats
plain
blame
-rw-r--r--
test_encoder_oob2.py
3679
log
stats
plain
blame
-rw-r--r--
test_encoder_oob3.py
3593
log
stats
plain
blame
-rw-r--r--
test_encoder_oob4.py
3770
log
stats
plain
blame
-rw-r--r--
test_range_polarity.py
3859
log
stats
plain
blame
-rw-r--r--
test_regguard.py
3774
log
stats
plain
blame
-rw-r--r--
test_regguard_offline.py
5104
log
stats
plain
blame
-rw-r--r--
test_rollback_51.py
3216
log
stats
plain
blame
-rw-r--r--
test_tmr_impact.py
3459
log
stats
plain
blame
-rw-r--r--
test_tmr_protection.py
2896
log
stats
plain
blame
-rw-r--r--
test_tmr_range_guard.py
3957
log
stats
plain
blame
-rw-r--r--
timing_map.py
2273
log
stats
plain
blame
-rw-r--r--
timing_sc.py
2006
log
stats
plain
blame
-rw-r--r--
timing_validate.py
2115
log
stats
plain
blame
-rw-r--r--
tmz_probe.py
3982
log
stats
plain
blame
-rw-r--r--
tmz_raw.py
2427
log
stats
plain
blame
-rw-r--r--
toctou_behavior.py
5417
log
stats
plain
blame
-rw-r--r--
toctou_bridge.py
5495
log
stats
plain
blame
-rw-r--r--
toctou_curve.py
2957
log
stats
plain
blame
-rw-r--r--
toctou_detect.py
4649
log
stats
plain
blame
-rw-r--r--
toctou_prove.py
4325
log
stats
plain
blame
-rw-r--r--
toctou_prove2.py
4394
log
stats
plain
blame
-rw-r--r--
toctou_rejcurve.py
5770
log
stats
plain
blame
-rw-r--r--
toctou_replicate.py
3303
log
stats
plain
blame
-rwxr-xr-x
toctou_run.sh
765
log
stats
plain
blame
-rw-r--r--
toctou_sweep.py
12627
log
stats
plain
blame
-rw-r--r--
toctou_sysdrv.py
3592
log
stats
plain
blame
-rw-r--r--
toctou_sysdrv2.py
5728
log
stats
plain
blame
-rw-r--r--
toctou_ta.py
4614
log
stats
plain
blame
-rw-r--r--
toctou_tashm.py
5804
log
stats
plain
blame
-rw-r--r--
umc_recheck.py
879
log
stats
plain
blame
-rw-r--r--
umc_survey.py
2148
log
stats
plain
blame
-rw-r--r--
umc_validate.py
1645
log
stats
plain
blame
-rw-r--r--
undoc_probe.py
2393
log
stats
plain
blame
d---------
v53
394
log
stats
plain
-rw-r--r--
validate_disclosure_detector.py
3329
log
stats
plain
blame
-rw-r--r--
validate_ifwi.py
2472
log
stats
plain
blame
-rw-r--r--
vcn_4_0_0.bin
403856
log
stats
plain
blame
-rw-r--r--
vcn_confirm.py
2571
log
stats
plain
blame
-rw-r--r--
vcn_gate_probe.py
3989
log
stats
plain
blame
-rw-r--r--
vcn_index_probe.py
3241
log
stats
plain
blame
-rw-r--r--
vcn_map_calib.py
3672
log
stats
plain
blame
-rw-r--r--
vcn_size_probe.py
2720
log
stats
plain
blame
-rw-r--r--
vcn_sweep_detect.py
2839
log
stats
plain
blame
-rw-r--r--
vcn_ucode.bin
403600
log
stats
plain
blame
-rw-r--r--
vcn_write_detect.py
3439
log
stats
plain
blame
d---------
vdiff
1056
log
stats
plain
-rw-r--r--
vdiff2.py
2923
log
stats
plain
blame
-rw-r--r--
vdiff_func.py
3306
log
stats
plain
blame
-rw-r--r--
verify_idbs.py
840
log
stats
plain
blame
-rw-r--r--
verify_nondet.py
3323
log
stats
plain
blame
d---------
versions
2036
log
stats
plain
d---------
versions_lfw
2060
log
stats
plain
d---------
versions_win
6429
log
stats
plain
-rw-r--r--
vport.py
4162
log
stats
plain
blame
-rw-r--r--
vport2.py
6629
log
stats
plain
blame
-rw-r--r--
vport_emit.py
2986
log
stats
plain
blame
-rw-r--r--
vram_check.py
2694
log
stats
plain
blame
-rw-r--r--
vram_probe.py
3846
log
stats
plain
blame