To mitigate meltdown insecurity threat CVE-2017-5754 Rogue Data Access using C/C++ high level software

[schav7]

I have a query on spectre and meltdown insecurity threats to modern Intel CPUs. How can software developers can mitigate these in their c/c++ code. I have a query. Can we mitigate meltdown variant CVE-2017-5754 called as Rogue Data Access in c/c++ logic? or in MSVC compiler? or in Visual Studio compiler?

regards

sachindeo

[Wanner_G_Intel]

Hello schav7,

Thank you for posting on this Intel Community.

End users and systems administrators should check with their operating system vendors and system manufacturers, and apply any available updates as soon as they are available. You should do this whether you use an Intel-based system, or other computer or mobile device. The most effective solution to this situation can vary, and may include updates to the operating system and firmware.

For additional information on Side-channel Vulnerability and Mitigation Methods, please review the following support link:

Side-channel Vulnerability and Mitigation Methods

Wanner G.

Intel Customer Support Technician

Under Contract to Intel Corporation

[schav7]

Hi Wanner

Thank for the reply actually am looking for implementing a custom software sunction in c/c++ that will mitigate spectre variant 2 and 4 ,

Variant 4 is CVE-2017-5754 Rogue Data Access

Variant 2 is (CVE-2017-5715) Branch target injection

regards

sachin

[Wanner_G_Intel]

Hello schav7,

We will investigate this issue further and get back to you soon.

Wanner G.

Intel Customer Support Technician

Under Contract to Intel Corporation

[Wanner_G_Intel]

Hello schav7,

We noted that you opened another thread describing the same issue - https://forums.intel.com/s/question/0D50P00004Mt1Bc

In this scenario, we recommend contacting the Intel® Developer Zone, create an account and submit your inquiry. 

Regards,

Wanner G.

Intel Customer Support Technician

Under Contract to Intel Corporation