[Bug string/33060] Power 10 strncmp clobbers nonvolatile vector registers (CVE-2025-5745)

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=33060

--- Comment #1 from Florian Weimer <fweimer at redhat dot com> ---
The description mentions “2.39 or later”. However, I believe this is the
vulnerable commit:

commit 23f0d81608d0ca6379894ef81670cf30af7fd081
Author: Amrita H S <amritahs@linux.ibm.com>
Date:   Mon May 6 09:01:29 2024 -0500

    powerpc: Optimized strncmp for power10

    This patch is based on __strcmp_power10.

    Improvements from __strncmp_power9:

        1. Uses new POWER10 instructions
           - This code uses lxvp to decrease contention on load
             by loading 32 bytes per instruction.

        2. Performance implication
           - This version has around 38% better performance on average.
           - Minor performance regression is seen for few small sizes
             and specific combination of alignments.

    Signed-off-by: Amrita H S <amritahs@linux.ibm.com>
    Reviewed-by: Peter Bergner <bergner@linux.ibm.com>

And it went into 2.40 only and has not been backported upstream.

-- 
You are receiving this mail because:
You are on the CC list for the bug.