[Bug string/33056] Power 10 strcmp clobbers nonvolatile vector registers (CVE-2025-5702)
fweimer at redhat dot com
sourceware-bugzilla@sourceware.org
Thu Jun 5 17:46:36 GMT 2025
https://sourceware.org/bugzilla/show_bug.cgi?id=33056
--- Comment #3 from Florian Weimer <fweimer at redhat dot com> ---
It seems that new memchr implementation from the same series clobbers vector
registers as well:
mtvsrd v18+32,r4 /* matching char in v18 */
mtvsrd v19+32,r6 /* non matching char in v19 */
vspltb v18,v18,7 /* replicate */
vspltb v19,v19,7 /* replicate */
vspltisb M_VREG_ZERO,0
But as far as I can see, this clobbers registers with the character being
searched, so the risk of information leakage is greatly reduced.
--
You are receiving this mail because:
You are on the CC list for the bug.
More information about the Glibc-bugs
mailing list