Project

General

Profile

ModemIsolationResearch » History » Version 10

Denis 'GNUtoo' Carikli, 03/08/2018 01:03 AM

1 1 Denis 'GNUtoo' Carikli
h1. ModemSharedMemory
2
3 4 Denis 'GNUtoo' Carikli
This page documents in more details the architecture of system on a chip and devices that have shared memory between the modem and the processor running Android. Since the modem runs (only) proprietary software, devices that doesn't have any mechanism that prevent the modem from taking control of the processor running Android are a grave concern for users freedom ans security.
4
5
This page focuses on that issue. Some Qualcomm System On a Chip that are affected by this issue also have other issues that aren't mentioned here but in [[Qualcomm_SOCs|the Qualcomm System On a Chip page]].
6
7 5 Denis 'GNUtoo' Carikli
Documenting the issue more in depth might allow us to understand if some devices with shared memory between the modem and the processor running Android might be able to be used safely.
8
9 6 Denis 'GNUtoo' Carikli
h2. System on a chip
10
11
This lists system on a chip that also Include a modem and have shared memory between the modem and the processor running Android, and the way the modem and the processor running Android are isolated or not.
12 1 Denis 'GNUtoo' Carikli
13 8 Denis 'GNUtoo' Carikli
|_. Vendor |_. System on a chip |_. Isolation |_. References |
14 2 Denis 'GNUtoo' Carikli
| Qualcomm | Mobile Station Modem (MSM) Snapdragon 7x30 | Bad:
15 3 Denis 'GNUtoo' Carikli
* The modem is in charge of loading the bootloader of the processor running Android. Because of that it can temper with that bootloader and take control of the processor running Android.
16
* The modem can access the memory of the processor running Android, and can take control of it through that way.
17
* The modem has access to the storage of the processor running Android, so it can take control of it through that.
18
| "boot process":http://tjworld.net/wiki/Android/HTC/Vision/BootProcess |
19 10 Denis 'GNUtoo' Carikli
| Qualcomm | Snapdragon S4 | Unknown? |
20
*"Boot process":https://forum.xda-developers.com/showthread.php?t=1769411&page=25
21
*"The Security of chip fabric page of rpw-pacsec2013-hexagon.pdf":https://web.archive.org/web/20131224103934if_/https://rpw.io/slides/rpw-pacsec2013-hexagon.pdf |
22 7 Denis 'GNUtoo' Carikli
23
h2. Devices
24
25
This lists devices that have the modem and the processor running Android in separate chips and use shared memory between them, along with the way the processor running Android is isolated from the modem, or not.
26
27 9 Denis 'GNUtoo' Carikli
|_. Vendor |_. Device |_. Isolation |_. References |
28 7 Denis 'GNUtoo' Carikli
| Samsung | Nexus S | ? | ? |
29
| Samsung | Galaxy S | ? | ? |