[Bug string/33056] Power 10 strcmp clobbers nonvolatile vector registers (CVE-2025-5702)

fweimer at redhat dot com sourceware-bugzilla@sourceware.org
Thu Jun 5 17:46:36 GMT 2025


https://sourceware.org/bugzilla/show_bug.cgi?id=33056

--- Comment #3 from Florian Weimer <fweimer at redhat dot com> ---
It seems that new memchr implementation from the same series clobbers vector
registers as well:

        mtvsrd  v18+32,r4       /* matching char in v18  */
        mtvsrd  v19+32,r6       /* non matching char in v19  */

        vspltb  v18,v18,7       /* replicate  */
        vspltb  v19,v19,7       /* replicate  */
        vspltisb  M_VREG_ZERO,0

But as far as I can see, this clobbers registers with the character being
searched, so the risk of information leakage is greatly reduced.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list