Processors
Intel® Processors, Tools, and Utilities
14399 Discussions

To implement Retpoline function in c/c++ high level function for mitigating Spectre variant 2 threat

schav7
Beginner
620 Views

I have a query on spectre insecurity threats to modern Intel CPUs on Windows OS. CVE-2017-5715, also known as spectre variant 2. Branch target injection spectre variant 2 can be mitigated using retpoline. I am unable to implement retpoline in c/c++ function. Can some one help?

I have seen retpoline solutions implemented in low level assemble language instructions posted on internet sites . Is it possible to implement retpoline using middleware language and not low level assembly?

 

0 Kudos
3 Replies
Alberto_R_Intel
Moderator
408 Views

schav7, Thank you for posting in the Intel® Communities Support.

 

Along with other companies whose platforms are impacted, Intel has worked with operating system vendors, equipment manufacturers, and other ecosystem partners to develop software and firmware updates that can protect computers from these methods. For full details on this topic please visit:

https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html

 

End users and systems administrators should check with their operating system vendors and system manufacturers, and apply any available updates as soon as they are available. You should do this whether you use an Intel-based system, or other computer or mobile device.

 

Regards,

Alberto R.

 

Intel Customer Support Technician   

Under Contract to Intel Corporation

0 Kudos
schav7
Beginner
408 Views

HI Alberto,

 

Thank for the reply actually am looking for implementing a custom software sunction in c/c++ that will mitigate spectre variant 2 and 4 ,

Variant 4 is CVE-2017-5754 Rogue Data Access

Variant 2 is (CVE-2017-5715) Branch target injection

regards

sachin

0 Kudos
Alberto_R_Intel
Moderator
408 Views

Hi schav7, you are very welcome, thank you very much for letting us know those details.

 

In this case, in order to get the most accurate response in reference to the information that you are looking for, please visit our Intel® Developer Zone site, once you do that you just need to create an account and then log in to be able to submit your inquiry, you will receive further peer to peer assistance in there:

https://software.intel.com/en-us/forum

 

Regards,

Alberto R.

 

Intel Customer Support Technician   

Under Contract to Intel Corporation

0 Kudos
Reply