Skip to content

Commit d4463f0

Browse files
updates to v1.0.4
1 parent ad6a43f commit d4463f0

1 file changed

Lines changed: 10 additions & 11 deletions

File tree

  • content/learning-paths/servers-and-cloud-computing/aws-greengrass-pacbti-test

content/learning-paths/servers-and-cloud-computing/aws-greengrass-pacbti-test/pacbti-testing.md

Lines changed: 10 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -51,10 +51,10 @@ In the subscriptions area of the MQTT test client window, you should see results
5151
"binary": "/greengrass/v2/work/danson-com.arm.demo.PacBtiDemo/build/armv9-protected/vuln_demo",
5252
"build_flavor": "armv9-protected",
5353
"device": "thor",
54-
"executed_at": "2026-04-13T14:37:02.512938+00:00",
54+
"executed_at": "2026-04-30T21:33:18.796870+00:00",
5555
"exploit_run": {
56-
"returncode": 1,
57-
"stderr": "Traceback (most recent call last):\n File \"/greengrass/v2/packages/artifacts-unarchived/danson-com.arm.demo.PacBtiDemo/1.0.4/arm-pac-bti-greengrass-demo-mqtt-trigger/arm-pac-bti-greengrass-demo/tools/exploit.py\", line 74, in <module>\n raise SystemExit(main())\n ^^^^^^\n File \"/greengrass/v2/packages/artifacts-unarchived/danson-com.arm.demo.PacBtiDemo/1.0.4/arm-pac-bti-greengrass-demo-mqtt-trigger/arm-pac-bti-greengrass-demo/tools/exploit.py\", line 66, in main\n result = run_exploit(args.binary, args.marker)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/greengrass/v2/packages/artifacts-unarchived/danson-com.arm.demo.PacBtiDemo/1.0.4/arm-pac-bti-greengrass-demo-mqtt-trigger/arm-pac-bti-greengrass-demo/tools/exploit.py\", line 43, in run_exploit\n payload = build_payload(target_addr, padding)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/greengrass/v2/packages/artifacts-unarchived/danson-com.arm.demo.PacBtiDemo/1.0.4/arm-pac-bti-greengrass-demo-mqtt-trigger/arm-pac-bti-greengrass-demo/tools/exploit.py\", line 37, in build_payload\n return (b\"A\" * padding) + raw\n ~~~~~^~~~~~~~~\nOverflowError: cannot fit 'int' into an index-sized integer\n",
56+
"returncode": 252,
57+
"stderr": "",
5858
"stdout": ""
5959
},
6060
"exploit_succeeded": false,
@@ -108,16 +108,16 @@ Your output should be similar to the following:
108108
"binary": "/greengrass/v2/work/danson-com.arm.demo.PacBtiDemo/build/armv8-unprotected/vuln_demo",
109109
"build_flavor": "armv8-unprotected",
110110
"device": "rpi5-desktop-16",
111-
"executed_at": "2026-04-13T14:44:07.485179+00:00",
111+
"executed_at": "2026-04-30T21:33:53.526756+00:00",
112112
"exploit_run": {
113-
"returncode": 1,
114-
"stderr": "Traceback (most recent call last):\n File \"/greengrass/v2/packages/artifacts-unarchived/danson-com.arm.demo.PacBtiDemo/1.0.4/arm-pac-bti-greengrass-demo-mqtt-trigger/arm-pac-bti-greengrass-demo/tools/exploit.py\", line 74, in <module>\n raise SystemExit(main())\n ^^^^^^\n File \"/greengrass/v2/packages/artifacts-unarchived/danson-com.arm.demo.PacBtiDemo/1.0.4/arm-pac-bti-greengrass-demo-mqtt-trigger/arm-pac-bti-greengrass-demo/tools/exploit.py\", line 66, in main\n result = run_exploit(args.binary, args.marker)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/greengrass/v2/packages/artifacts-unarchived/danson-com.arm.demo.PacBtiDemo/1.0.4/arm-pac-bti-greengrass-demo-mqtt-trigger/arm-pac-bti-greengrass-demo/tools/exploit.py\", line 43, in run_exploit\n payload = build_payload(target_addr, padding)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/greengrass/v2/packages/artifacts-unarchived/danson-com.arm.demo.PacBtiDemo/1.0.4/arm-pac-bti-greengrass-demo-mqtt-trigger/arm-pac-bti-greengrass-demo/tools/exploit.py\", line 37, in build_payload\n return (b\"A\" * padding) + raw\n ~~~~~^~~~~~~~~\nOverflowError: cannot fit 'int' into an index-sized integer\n",
113+
"returncode": 0,
114+
"stderr": "",
115115
"stdout": ""
116116
},
117-
"exploit_succeeded": false,
118-
"interpretation": "Exploit did not reach malicious_success(); on PAC/BTI builds a crash or early termination is expected.",
117+
"exploit_succeeded": true,
118+
"interpretation": "Exploit reached malicious_success()",
119119
"machine": "aarch64",
120-
"marker_found": false,
120+
"marker_found": true,
121121
"normal_run": {
122122
"returncode": 0,
123123
"stderr": "",
@@ -137,9 +137,8 @@ Your output should be similar to the following:
137137
"source_topic": "arm/demo/Dougs_RPi5_Hailo_16/security/pacbti/attack/trigger"
138138
}
139139
}
140-
```
141140
142-
This result indicates the RPi5 device (Armv8) does not report PAC and BTI capabilities.
141+
This result indicates the RPi5 device (Armv8) does not report PAC and BTI capabilities and thus is vulnerable to some attacks that PAC/BTI inhibits.
143142
144143
### What we learned
145144

0 commit comments

Comments
 (0)