The key is the test TST_SEL_RET on line 682. It compares the RPL of the return CS selector (saved on the stack by the original CALL) against the current CPL. If RPL == CPL, the PLA returns 0x000 (continue) and LD_DESCRIPTOR finishes normally -- same-privilege return. If RPL CPL, the caller is returning to a less-privileged ring, so the PLA redirects to 0x686 (RETF_OUTER_LEV) -- the cross-privilege path that must also restore the caller's stack. If RPL
These are meaningful improvements, and some are clearly already underway. We'd love to see Google go further and retroactively audit existing impacted keys and notify project owners who may be unknowingly exposed, but honestly, that is a monumental task.
，更多细节参见搜狗输入法2026
Source: Computational Materials Science, Volume 267
OpenAI宣布获得新融资1100亿美元，其中300亿美元来自软银，300亿美元来自英伟达，500亿美元来自亚马逊，投前估值7300亿美元。OpenAI称，公司还与亚马逊签署了战略合作伙伴关系，并与英伟达签订了关于下一代推理计算的协议。随着这轮融资的进行，预计后续还会有更多金融投资者加入。（第一财经）