Spaghettifying DRAM
Summary
Spaghettifying DRAM presents a deep-dive into memory controller transforms (MCT/DCT) and how DRAM address translations can be manipulated to scramble memory. The work shows how a single bit flip can create spaghettified memory views and bypass platform protections, with a toolchain and z3-based methods to derive translation matrices. It discusses PSP, SMM, C6, and other guarded memories, plus how this research could inform defensive mitigations and hardware hardening.