Menu

#468 ARM: VFP register offset shift and GDB crash on cores without MON/HYP extensions

1.0.0
new
None
2026-03-12
2026-03-12
No

In src/target/armv4_5.c, function arm_build_reg_cache() uses "continue" statements producing a mismatch in register numbering. The vulnerability exists for any core where the arm_core_type is not ARM_CORE_TYPE_SEC_EXT or ARM_CORE_TYPE_VIRT_EXT, including i.MX6 and AM335x on BBB (BeagleBone Black).

As a result, on OpenOCD v0.12.0 the opuput of "reg" command is inconsistent (d31 and fpscr are missing, see openocd_012_gdb.log attached).
Trunk openocd build also has this issue. But besides of that, the "i r" command produces an error forcing gdb to disconnect from the target.

8 Attachments

Discussion


Log in to post a comment.

MongoDB Logo MongoDB