Is Google Native Client (NaCl) vulnerable to Meltdown or Spectre attacks?

Asked Jan 11 '18 at 16:23

Active Jan 12 '18 at 12:35

Viewed 199 times

I run sel_ldr_x86_32 file32.nacl and sel_ldr_x86_64 file64.nacl on my Intel machine vulnerable to Meltdown and Spectre.

Given that even JavaScript can employ Spectre, I am curious if NaCl'ed binaries can. Are there any known vulnerabilities of NaCl related to Meltdown or Spectre? Does NaCl provide enough powers to binaries to run Meltdown or Spectre? Examples of such vulnerabilities would be escaping the NaCl sandbox or reading something from any memory otherwise unavailable for the application.

edited Jan 12 '18 at 12:35

asked Jan 11 '18 at 16:23

Stair

Is Google Native Client (NaCl) vulnerable to Meltdown or Spectre attacks?

0 Answers0