First, and as always, I want to express my appreciation to Theo and to
all the past and present devs. The world is not full of bunny rabbits
and wildflowers ...
---
I have a refurb Lenovo T420 off ebay with a very old BIOS from 2011.
Nice refurb, eh ?? Here are some before and after notes based on the
previous "meltdown" thread. Thanks also to Chris for sharing that github
link. I present this for the benefit of others. Good luck out there ;-)
---
$> uname -vprs
OpenBSD 6.3 GENERIC.MP#48 amd64
$> dmesg | grep -i bios0 | sort -u
acpi0 at bios0: rev 2
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xdae9c000 (67 entries)
bios0: LENOVO 41786UU
bios0: vendor LENOVO version "83ET63WW (1.33 )" date 07/29/2011
$> doas ./meltdown -v
CPU has RDTSCP
CPU has no TSX support!
Access time: memory 300, cache 107 -> threshold 203
Using addr 0xffffffff81864f90 for symbol '_version'.
0000 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0010 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0020 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0030 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0040 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0050 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0060 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0070 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0080 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??????????
matched 0% (0 of 138 bytes)
System is not vulnerable to meltdown
0000 53 70 65 63 69 61 6c 20 45 78 65 63 75 74 69 76 Special Executiv
0010 65 20 66 6f 72 20 43 6f 75 6e 74 65 72 69 6e 74 e for Counterint
0020 65 6c 6c 69 67 65 6e 63 65 2c 20 54 65 72 72 6f elligence, Terro
0030 72 69 73 6d 2c 20 52 65 76 65 6e 67 65 20 61 6e rism, Revenge an
0040 64 20 45 78 74 6f 72 74 69 6f 6e 2e d Extortion.
matched 100% (76 of 76 bytes)
System is vulnerable to spectre
$> cpuid 0x0
eax = 0x0000000d 13 "????"
ebx = 0x756e6547 1970169159 "Genu"
ecx = 0x6c65746e 1818588270 "ntel"
edx = 0x49656e69 1231384169 "ineI"
$> cpuid 0x7
eax = 0x00000000 0 "????"
ebx = 0x00000000 0 "????"
ecx = 0x00000000 0 "????"
edx = 0x00000000 0 "????"
$> dmesg | grep -i ^cpu[0-3] | sort -u
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: Enhanced SpeedStep 2492 MHz: speeds: 2501, 2500, 2200, 2000, 1800, 1600,
1400, 1200, 1000, 800 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,SENSOR,ARAT,MELTDOWN
cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.23 MHz
cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.26 MHz
cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.30 MHz
cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.31 MHz
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE
cpu0: smt 0, core 0, package 0
cpu1 at mainbus0: apid 1 (application processor)
cpu1: 256KB 64b/line 8-way L2 cache
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,SENSOR,ARAT,MELTDOWN
cpu1: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.90 MHz
cpu1: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu1: smt 1, core 0, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: 256KB 64b/line 8-way L2 cache
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,SENSOR,ARAT,MELTDOWN
cpu2: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.90 MHz
cpu2: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu2: smt 0, core 1, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: 256KB 64b/line 8-way L2 cache
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,SENSOR,ARAT,MELTDOWN
cpu3: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.90 MHz
cpu3: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu3: smt 1, core 1, package 0
----
# NEW BIOS
----
$> dmesg | grep -i bios0 | sort -u
acpi0 at bios0: rev 2
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xdae9c000 (65 entries)
bios0: LENOVO 41786UU
bios0: vendor LENOVO version "83ET80WW (1.50 )" date 03/06/2018
acpi0 at bios0: rev 2
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xdae9c000 (65 entries)
bios0: LENOVO 41786UU
bios0: vendor LENOVO version "83ET80WW (1.50 )" date 03/06/2018
$> dmesg | grep -i ^cpu[0-3] | sort -u
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: Enhanced SpeedStep 2492 MHz: speeds: 2501, 2500, 2200, 2000, 1800, 1600,
1400, 1200, 1000, 800 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.33 MHz
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE
cpu0: smt 0, core 0, package 0
cpu1 at mainbus0: apid 1 (application processor)
cpu1: 256KB 64b/line 8-way L2 cache
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu1: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu1: smt 1, core 0, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: 256KB 64b/line 8-way L2 cache
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu2: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu2: smt 0, core 1, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: 256KB 64b/line 8-way L2 cache
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu3: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu3: smt 1, core 1, package 0
$> cpuid 0x0
eax = 0x0000000d 13 "????"
ebx = 0x756e6547 1970169159 "Genu"
ecx = 0x6c65746e 1818588270 "ntel"
edx = 0x49656e69 1231384169 "ineI"
$> cpuid 0x7
eax = 0x00000000 0 "????"
ebx = 0x00000000 0 "????"
ecx = 0x00000000 0 "????"
edx = 0x0c000000 201326592 "????"
$> doas time ./meltdown -v
CPU has RDTSCP
CPU has no TSX support!
Access time: memory 338, cache 136 -> threshold 237
Using addr 0xffffffff81a71100 for symbol '_version'.
0000 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0010 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0020 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0030 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0040 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0050 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0060 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0070 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ????????????????
0080 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??????????
matched 0% (0 of 138 bytes)
System is not vulnerable to meltdown
0000 53 70 65 63 69 61 6c 20 45 78 65 63 75 74 69 76 Special Executiv
0010 65 20 66 6f 72 20 43 6f 75 6e 74 65 72 69 6e 74 e for Counterint
0020 65 6c 6c 69 67 65 6e 63 65 2c 20 54 65 72 72 6f elligence, Terro
0030 72 69 73 6d 2c 20 52 65 76 65 6e 67 65 20 61 6e rism, Revenge an
0040 64 20 45 78 74 6f 72 74 69 6f 6e 2e d Extortion.
matched 100% (76 of 76 bytes)
System is vulnerable to spectre
84.70 real 79.00 user 5.71 sys
