Sleight of ARM: Demystifying Intel Houdini
Brian Hong reverse engineers Intel Houdini, the proprietary ARM-to-x86 binary translator for Android, auditing its translation engine and memory safety.
Summary
The Role of Intel Houdini in Cross-Architecture Translation
To enable x86 Android tablets and emulators to run ARM-native mobile applications, Intel engineered Houdini, a proprietary dynamic binary translation engine.
Reverse Engineering the Houdini Translation Engine
Brian Hong conducts a comprehensive reverse engineering audit of Houdini’s internal just-in-time (JIT) compiler, instruction caches, and system call translation layers.
Discovering Vulnerabilities Across Instruction Set Boundaries
Hong investigates how Houdini maps memory permissions and translates ARM signal handlers, revealing subtle memory corruption bugs that break execution sandboxes.
Security Implications of Binary Translation Layers
The author evaluates the attack surface of cross-architecture emulators and translation runtimes in modern computing platforms.
Related talks
Main Stage·37 min
Mathias Krog · Christian Skovsende
Reverse engineers Intel CPU microcode on Goldmont cores, achieving persistent userspace microcode patching on Linux to create hardware backdoors in x86 execution.
Main Stage·46 min
Christopher Domas
Christopher Domas presents god mode unlocked hardware backdoors in redacted x86: Complexity is increasing.
Main Stage·42 min
Josep Pi Rodriguez
Josep Pi Rodriguez presents wingos: how to own millions of devices .: Extreme network's embedded WingOS (Originally created by Motorola) is an operating system used in several wireless devices such as access points...