PHPerのためのよくわかるCPU脆弱性解説 / What's Spectra for PHPers #phpconfuk

by HASEGAWA Tomoki

Slide 1

Slide 1 text

௕୩઒ஐر 1)1FSͷͨΊͷΑ͘Θ͔Δ $16੬ऑੑղઆ

Slide 2

Slide 2 text

௕୩઒ஐر !UPN[PI

Slide 3

Slide 3 text

ϥΠϑϫʔΫ ςοΫΧϯϑΝϨϯεӡӦࢀՃ 8FCJ04ΞϓϦ։ൃ Ϗʔϧ ిࢠ޻࡞ αοΧʔ؍ઓ Ϩϯλ ϧΧʔτϨʔε ʜ σδλϧαʔΧεגࣜձࣾ ෭ஂ௕$50 !UPN[PI

Slide 4

Slide 4 text

No content

Slide 5

Slide 5 text

No content

Slide 6

Slide 6 text

8FC%FWFMPQNFOUXJUI 8&"3&)*3*/( IUUQXXXEHDJSDVTDPN 0NPUFTBOEP 5PLZP

Slide 7

Slide 7 text

ࠓ೔ͷςʔϚ

Slide 8

Slide 8 text

$16ͷ੬ऑੑ4QFDUSF ε ϖ Ϋ λ ʔ

Slide 9

Slide 9 text

೥݄೔

Slide 10

Slide 10 text

IUUQTHPPHMFQSPKFDU[FSPCMPHTQPUKQSFBEJOHQSJWJMFHFENFNPSZXJUITJEFIUNM

Slide 11

Slide 11 text

XJUIBTJEFDIBOOFM ࣙॻӳࣙ࿠POUIF8&# QSJWJMFHFE 3FBEJOH NFNPSZ

Slide 12

Slide 12 text

XJUIBTJEFDIBOOFM ࣙॻӳࣙ࿠POUIF8&# 3FBEJOH NFNPSZ QSJWJMFHFE

Slide 13

Slide 13 text

XJUIBTJEFDIBOOFM ࣙॻӳࣙ࿠POUIF8&# 3FBEJOH NFNPSZ QSJWJMFHFE QSJWJMFHFE ʲ໊ʳʬUIFʙʭಛݖ֊ڃʦ૚ʧ ʲܗʳಛݖΛ࣋ͭɺಛݖͷ͋Δ QSÍWɾJɾMFHFE

Slide 14

Slide 14 text

ಛݖྖҬͷϝϞϦΛ  αΠυνϟωϧ੬ऑੑΛ࢖ͬͯಡΈࠐΉ

Slide 15

Slide 15 text

ͭ·Γ

Slide 16

Slide 16 text

ಡΊͯ͸͍͚ͳ͍ϝϞϦྖҬΛ ಡΊͯ͠·͏

Slide 17

Slide 17 text

ͱͯ΋େ͖ͳ࿩୊ʹͳͬͨ

Slide 18

Slide 18 text

No content

Slide 19

Slide 19 text

No content

Slide 20

Slide 20 text

ͳͥେ͖ͳ࿩୊ʹͳ͔ͬͨ

Slide 21

Slide 21 text

ᶃର৅ʢͱࢥΘΕΔʣ$16͕͘͢͝ଟ͍

Slide 22

Slide 22 text

7BSJBOUTPGUIJTJTTVFBSFLOPXOUPBGGFDU NBOZNPEFSOQSPDFTTPST JODMVEJOHDFSUBJO QSPDFTTPSTCZ*OUFM ".%BOE"3. ᶃର৅ʢͱࢥΘΕΔʣ$16͕͘͢͝ଟ͍

Slide 23

Slide 23 text

7BSJBOUTPGUIJTJTTVFBSFLOPXOUPBGGFDU NBOZNPEFSOQSPDFTTPST JODMVEJOHDFSUBJO QSPDFTTPSTCZ*OUFM ".%BOE"3. .BD 8JOEPXTϚγϯ 8FCαʔόͳͲ֤छαʔό ᶃର৅ʢͱࢥΘΕΔʣ$16͕͘͢͝ଟ͍

Slide 24

Slide 24 text

7BSJBOUTPGUIJTJTTVFBSFLOPXOUPBGGFDU NBOZNPEFSOQSPDFTTPST JODMVEJOHDFSUBJO QSPDFTTPSTCZ*OUFM ".%BOE"3. .BD 8JOEPXTϚγϯ 8FCαʔόͳͲ֤छαʔό J1IPOF "OESPJE ϧʔλ *P5ػث ᶃର৅ʢͱࢥΘΕΔʣ$16͕͘͢͝ଟ͍

Slide 25

Slide 25 text

ᶄରࡦ͕औΓͮΒ͍

Slide 26

Slide 26 text

ᶄରࡦ͕औΓͮΒ͍ ৄࡉ͸ޙड़

Slide 27

Slide 27 text

ͲΜͳ੬ऑੑ͔

Slide 28

Slide 28 text

ͷલʹ$16جૅ஌ࣝ

Slide 29

Slide 29 text

جૅ஌ࣝΩϟογϡ

Slide 30

Slide 30 text

Ωϟογϡ

Slide 31

Slide 31 text

Ωϟογϡ $16ʹ಺ଂ͞Εͨߴ଎ͳϝϞϦ

Slide 32

Slide 32 text

Ωϟογϡ Ұ౓ಡΜͩσʔλ͸Ωϟογϡʹஔ͘ $16ʹ಺ଂ͞Εͨߴ଎ͳϝϞϦ

Slide 33

Slide 33 text

Ωϟογϡ ߴ଎ʹಈ࡞ͤ͞ΔͨΊʢϝϞϦ͸஗͍ʣ Ұ౓ಡΜͩσʔλ͸Ωϟογϡʹஔ͘ $16ʹ಺ଂ͞Εͨߴ଎ͳϝϞϦ

Slide 34

Slide 34 text

Ωϟογϡ ݱ୅ͷ$16͸ΩϟογϡΛଟ༻͢Δ ߴ଎ʹಈ࡞ͤ͞ΔͨΊʢϝϞϦ͸஗͍ʣ Ұ౓ಡΜͩσʔλ͸Ωϟογϡʹஔ͘ $16ʹ಺ଂ͞Εͨߴ଎ͳϝϞϦ

Slide 35

Slide 35 text

جૅ஌ࣝ౤ػత࣮ߦ

Slide 36

Slide 36 text

զʑ͸1)1FSͳͷͰ 1)1Ά͍ݴޠͰղઆ

Slide 37

Slide 37 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ FDIP1$ FYJU FDIPl8PSME

Slide 38

Slide 38 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ FDIP1$ FYJU FDIPl8PSME ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ

Slide 39

Slide 39 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ FDIP1$ FYJU FDIPl8PSME ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠Β΁Μ΋࣮ߦ͢Δ

Slide 40

Slide 40 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ FDIP1$ FYJU FDIPl8PSME ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠Β΁Μ΋࣮ߦ͢Δ ʣͷJGͷ݁ՌʹΑͬͯ͸ ແବʹͳΔ͚Ͳ౤ػతʹ࣮ߦ͢Δ

Slide 41

Slide 41 text

جૅ஌ࣝྫ֎

Slide 42

Slide 42 text

$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G G G GGGGGGGG (#

Slide 43

Slide 43 text

$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G G G GGGGGGGG (# 04

Slide 44

Slide 44 text

$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G G G GGGGGGGG (# 04 ϢʔβϓϩάϥϜ ϢʔβϓϩάϥϜ

Slide 45

Slide 45 text

$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G G G GGGGGGGG (# 04 ϢʔβϓϩάϥϜ ϢʔβϓϩάϥϜ͕  $16͕ڐՄ͠ͳ͍  ྖҬͷϝϞϦʹ  ΞΫηε͢Δͱྫ֎  ϢʔβϓϩάϥϜ

Slide 46

Slide 46 text

IUUQMBCPSBUPSZTVCKQDIUNM

Slide 47

Slide 47 text

جૅ஌ࣝ౤ػత࣮ߦ جૅ஌ࣝΩϟογϡ جૅ஌ࣝྫ֎

Slide 48

Slide 48 text

جૅ஌ࣝ౤ػత࣮ߦ جૅ஌ࣝΩϟογϡ جૅ஌ࣝྫ֎ Ұ౓ϝϞϦ͔ΒಡΜͩσʔλΛߴ଎ͳϝϞϦʹஔ͍͓ͯ͘

Slide 49

Slide 49 text

جૅ஌ࣝ౤ػత࣮ߦ جૅ஌ࣝΩϟογϡ جૅ஌ࣝྫ֎ Ұ౓ϝϞϦ͔ΒಡΜͩσʔλΛߴ଎ͳϝϞϦʹஔ͍͓ͯ͘ ઌͷํΛ࣮ߦ͓ͯ͘͠

Slide 50

Slide 50 text

جૅ஌ࣝ౤ػత࣮ߦ جૅ஌ࣝΩϟογϡ جૅ஌ࣝྫ֎ Ұ౓ϝϞϦ͔ΒಡΜͩσʔλΛߴ଎ͳϝϞϦʹஔ͍͓ͯ͘ ઌͷํΛ࣮ߦ͓ͯ͘͠ $16͕ڐՄ͠ͳ͍ϝϞϦʹΞΫηε͢ΔͱΤϥʔ

Slide 51

Slide 51 text

$16ͷ੬ऑੑ4QFDUSF ε ϖ Ϋ λ ʔ

Slide 52

Slide 52 text

͜ΜͳϝϞϦϚοϓΛ૝ఆ

Slide 53

Slide 53 text

''' ϢʔβϓϩάϥϜ ϢʔβϓϩάϥϜ ผͷϓϩάϥϜ

Slide 54

Slide 54 text

͜ΜͳϓϩάϥϜ͕͋ͬͨͱ͢Δ

Slide 55

Slide 55 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ CSFBE DSFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ

Slide 56

Slide 56 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ CSFBE DSFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ

Slide 57

Slide 57 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ CSFBE DSFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠Β΁Μ͕࣮ߦ͞ΕΔ

Slide 58

Slide 58 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ CSFBE DSFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠Β΁Μ͕࣮ߦ͞ΕΔ ʣͷ஋ΛCʹ֨ೲɻ

Slide 59

Slide 59 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ CSFBE DSFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠Β΁Μ͕࣮ߦ͞ΕΔ ʣͷ஋ΛCʹ֨ೲɻ ຊདྷ͸ྫ֎͕ൃੜ͢ΔΞΫηε ౤ػ࣮ߦத͸ྫ֎ൃੜ͠ͳ͍ ʢൃੜͨ͠ΒࠔΔʣ

Slide 60

Slide 60 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ CSFBE DSFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠Β΁Μ͕࣮ߦ͞ΕΔ ʣͷ஋ΛCʹ֨ೲɻ ʣ C ͷ஋Λ  Dʹ֨ೲɻ

Slide 61

Slide 61 text

ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ CSFBE DSFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜Β΁ΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠Β΁Μ͕࣮ߦ͞ΕΔ ʣͷ஋ΛCʹ֨ೲɻ ʣ C ͷ஋Λ  Dʹ֨ೲɻ w ʙGGͷൣғ w ϢʔβϓϩάϥϜ͔ΒΞΫηεͰ͖ΔྖҬ w ͜ͷΞΫηεͰʙGGͷ  Ͳ͔͜ͷόΠτ͕Ωϟογϡʹ৐Δ

Slide 62

Slide 62 text

Slide 63

Slide 63 text

ΞυϨε ಺༰ YY YY YY YY YY YY YY GG YY ΞυϨε ಺༰ GPS JJJ \ TUBSUUJNF ESFBE J FOEUJNF JG FOETUBSU \ FDIPͷ஋͸JͰͨ͠ʂʂ ^ ^ SFUVSO

Slide 64

Slide 64 text

ΞυϨε ಺༰ YY YY YY YY YY YY YY GG YY ΞυϨε ಺༰ GPS JJJ \ TUBSUUJNF ESFBE J FOEUJNF JG FOETUBSU \ FDIPͷ஋͸JͰͨ͠ʂʂ ^ ^ SFUVSO ॱ൪ʹಡΈࠐΈ͔͔ͯͬͨ࣌ؒ͠Λଌఆ

Slide 65

Slide 65 text

ΞυϨε ಺༰ YY YY YY YY YY YY YY GG YY ΞυϨε ಺༰ GPS JJJ \ TUBSUUJNF ESFBE J FOEUJNF JG FOETUBSU \ FDIPͷ஋͸JͰͨ͠ʂʂ ^ ^ SFUVSO ॱ൪ʹಡΈࠐΈ͔͔ͯͬͨ࣌ؒ͠Λଌఆ ͚ͩ͘͢͝ಡΈࠐΈ͕଎͔ͬͨ  ‎͕Ωϟογϡʹ৐͍ͬͯͨ ‎ຊདྷಡΊͳ͍ͷ಺༰͸ͩͬͨ

Slide 66

Slide 66 text

ΞυϨε ಺༰ YY YY YY YY YY YY YY GG YY ΞυϨε ಺༰ GPS JJJ \ TUBSUUJNF ESFBE J FOEUJNF JG FOETUBSU \ FDIPͷ஋͸JͰͨ͠ʂʂ ^ ^ SFUVSO ॱ൪ʹಡΈࠐΈ͔͔ͯͬͨ࣌ؒ͠Λଌఆ ΞυϨε ಺༰ FDIP)FMMP BSBOE JG B \HPUP^ CSFBE DSFBE C ʢΞΫηεݖͷͳ͍஋ʣ ͚ͩ͘͢͝ಡΈࠐΈ͕଎͔ͬͨ  ‎͕Ωϟογϡʹ৐͍ͬͯͨ ‎ຊདྷಡΊͳ͍ͷ಺༰͸ͩͬͨ

Slide 67

Slide 67 text

Slide 68

Slide 68 text

$16ͷ੬ऑੑ4QFDUSF ε ϖ Ϋ λ ʔ ʢݫີʹ͸4QFDUSFͱ.FMUEPXOͷ૊߹ͤʣ

Slide 69

Slide 69 text

͜Μͳ͓࿩Ͱͨ͠

Slide 70

Slide 70 text

͓΋͠Ζ͍Ͱ͢Ͷʂ

Slide 71

Slide 71 text

ͱ͜ΖͰʜ

Slide 72

Slide 72 text

ᶄରࡦ͕औΓͮΒ͍

Slide 73

Slide 73 text

ᶄରࡦ͕औΓͮΒ͍ wۙ୅ͷ$16͸ɺ໋ྩΛ୯७Խͯ͠$16಺ͷσό ΠεͰ෼ۀͯ͠ॲཧ͢Δ͜ͱͰߴ଎Խ͍ͯ͠Δɻ w$16ͷ֎ͷ஗͍σόΠεΛͨͩ଴ͪͨ͘ͳ͍ɻ  $16಺ʹख͕ۭ͘σόΠεΛ࡞Γͨ͘ͳ͍ɻ w౤ػత࣮ߦͦ͜ߴ଎ԽͷΩϞɻ

Slide 74

Slide 74 text

͓͠·͍ !UPN[PI w "TLUIF4QFBLFS w ࠙਌ձ w 5XJUUFS w #MPH

Slide 75

Slide 75 text

ສ͕Ұ͕࣌ؒ༨ͬͨͱ͖ͷͨΊͷ ͓·͚

Slide 76

Slide 76 text

%ʙ% "ʙ" *OUFM1FOUJVN

Slide 77

Slide 77 text

%ʙ% "ʙ" *OUFM1FOUJVN ΞυϨεόεϏοτ ʙGGGGGGGGͷ(# "ʙ"͸ݻఆ όΠτʢϏοτʣ୯ҐͷΞΫηε

Slide 78

Slide 78 text

Slide 79

Slide 79 text

Ͳ͏΍ͬͯରࡦ͍ͯ͠Δ͔

Slide 80

Slide 80 text

$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G G G GGGGGGGG (# 04 ϢʔβϓϩάϥϜ

Slide 81

Slide 81 text

෼ذ༧ଌόοϑΝ

Slide 82

Slide 82 text

෼ذ༧ଌόοϑΝ w෼ذΛ༧ଌͰ͖Δͱ౤ػ࣮ߦ͕ແବʹͳΓʹ͍͘ɻخ͍͠ɻ wաڈͷ෼ذΛهԱ͓͍ͯͯ͠ɺ֬཰తͳφχͰ༧ଌ͢Δɻ  ʢ෼ذ༧ଌόοϑΝʣ wϐϯϙΠϯτʹʮ͜ͷ෼ذ໋ྩʯͱ͍͏όοϑΝͱɺ৔ॴʹ ݶΒͣʮ͜͜෼ذʯͱ͍͏࣌ؒతͳൣғͰఆΊͨόοϑΝ ΋͋Δɻ

Slide 83

Slide 83 text

෼ذ༧ଌόοϑΝ w෼ذΛ༧ଌͰ͖Δͱ౤ػ࣮ߦ͕ແବʹͳΓʹ͍͘ɻخ͍͠ɻ wաڈͷ෼ذΛهԱ͓͍ͯͯ͠ɺ֬཰తͳφχͰ༧ଌ͢Δɻ  ʢ෼ذ༧ଌόοϑΝʣ wϐϯϙΠϯτʹʮ͜ͷ෼ذ໋ྩʯͱ͍͏όοϑΝͱɺ৔ॴʹ ݶΒͣʮ͜͜෼ذʯͱ͍͏࣌ؒతͳൣғͰఆΊͨόοϑΝ ΋͋Δɻ ‎$16͕ϓϩάϥϚͷบΛಡΜͰ͍Δ  ʢͱ΋ݴ͑ΔͷͰ͸ͳ͍ͩΖ͏͔ʣ

Slide 84

Slide 84 text

()[ ճTFDԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16 -.# (#TFD ίΞ -,#  5#TFD -,# 5#TFD ॲཧ૷ஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD

Slide 85

Slide 85 text

()[ ճTFDԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16 -.# (#TFD ίΞ -,#  5#TFD -,# 5#TFD ॲཧ૷ஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD ഒ

Slide 86

Slide 86 text

()[ ճTFDԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16 -.# (#TFD ίΞ -,#  5#TFD -,# 5#TFD ॲཧ૷ஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD ഒ ഒ

Slide 87

Slide 87 text

()[ ճTFDԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16 -.# (#TFD ίΞ -,#  5#TFD -,# 5#TFD ॲཧ૷ஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD ഒ ഒ ഒ

Slide 88

Slide 88 text

()[ ճTFDԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16 -.# (#TFD ίΞ -,#  5#TFD -,# 5#TFD ॲཧ૷ஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD ഒ ഒ ഒ ഒ

Slide 89

Slide 89 text

σʔλͷہॴੑ wϓϩάϥϜ͕σʔλΛΞΫηε͢Δ৔߹ɺ ͍ۙྖҬʹ࿈ଓͯ͠ΞΫηε͢Δ͜ͱ͕ ଟ͍ɻ w͍ۭۙؒతPS࣌ؒత

Slide 90

Slide 90 text

QIQ GPS JJJ \ FDIP)FMMP8PSME ^ L2 #0 EXT_STMT L2 #1 ASSIGN $i 0 L2 #2 JMP J7 L3 #3 EXT_STMT L3 #4 ECHO "Hello World." L2 #5 POST_INC $i ~1 L2 #6 FREE ~1 L2 #7 IS_SMALLER $i 10 ~2 L2 #8 EXT_STMT L2 #9 JMPNZ ~2 J3 L6 #10 RETURN 1

Slide 91

Slide 91 text

Slide 92

Slide 92 text

Slide 93

Slide 93 text

Slide 94

Slide 94 text

ࠂ஌

Slide 95

Slide 95 text

No content

Slide 96

Slide 96 text

ʢۚʣʙʢ೔ʣ 1)1FS,BJHJ

Slide 97

Slide 97 text

ʢ໦ʣʙʢ೔ʣ τʔΫืूத

Slide 98

Slide 98 text

YYYYʙYYYY CVJMEFSTDPOUPLZP /PXPO$G1

Slide 99

Slide 99 text

͓͠·͍ !UPN[PI w "TLUIF4QFBLFS w ࠙਌ձ w 5XJUUFS w #MPH