CWE-1476 詳細資料

The product uses a multi-manager shared bus architecture with an on-chip interconnect that speculatively propagates a request for a write transaction, but it does not ensure that the remaining steps required by the manager module to complete the request are fulfilled in a timely manner.

背景詳情

引入方式

適用平台

程式語言

類別： Not Language-Specific (Undetermined)

架構

名稱： ARM (Undetermined)
類別： Not Architecture-Specific (Undetermined)

技術

名稱： Bus/Interface Hardware (Undetermined)
名稱： Communication Hardware (Undetermined)
類別： System on Chip (Undetermined)

常見後果

觀察到的案例

潛在緩解措施

偵測方法

Architecture or Design Review

有效性 : Opportunistic

Formal Verification

有效性 : High

Simulation / Emulation

有效性 : Moderate

漏洞對應備注

理由說明 : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
備註 : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

參考資料

REF-1585

Cut and Forward: Safe and Secure Communication for FPGA System on Chips
Francesco Restuccia, Ryan Kastner.
https://ieeexplore.ieee.org/document/9852740

REF-1586

Safely Preventing Unbounded Delays During Bus Transactions in FPGA-based SoC
Francesco Restuccia, Alessandro Biondi, Mauro Marinoni, Giorgio Buttazzo.
https://ieeexplore.ieee.org/abstract/document/9114758

REF-1587

[AXI-REALM: A lightweight and modular interconnect extension for traffic regulation and monitoring of heterogeneous real-time SoCs
Thomas Benz, Alessandro Ottaviano, Robert Balas, Angelo Garofalo, Francesco Restuccia, Alessandro Biondi, Luca Benini.
https://ieeexplore.ieee.org/document/10546511

REF-1588

Safety verification of third-party hardware modules via information flow tracking
Andres Meza, Francesco Restuccia, Ryan Kastner, Jason Oberg.
https://kastner.ucsd.edu/wp-content/uploads/2022/08/admin/rage22-safety.pdf

提交