summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/objects/obj_dat.c
diff options
context:
space:
mode:
authorjsing <>2024-01-24 13:39:44 +0000
committerjsing <>2024-01-24 13:39:44 +0000
commit304c4bea814902359fc956dde611b1bf4fe6c276 (patch)
tree679613d6a2cc3fc254ac55394a8acdda58969623 /src/lib/libcrypto/objects/obj_dat.c
parent89f19af6362020b7e29fb996f27bc58c7d872ef3 (diff)
downloadopenbsd-304c4bea814902359fc956dde611b1bf4fe6c276.tar.gz
openbsd-304c4bea814902359fc956dde611b1bf4fe6c276.tar.bz2
openbsd-304c4bea814902359fc956dde611b1bf4fe6c276.zip
Avoid a four byte overread in gcm_ghash_4bit() on amd64.
The assembly code for gcm_ghash_4bit() reads one too many times from Xi, resulting in a four byte overread. Prevent this by not loading the next value in the final iteration of the loop. If another full iteration is required the next Xi value will be loaded at the top of the outer_loop. Many thanks to Douglas Gliner <Douglas.Gliner at sony dot com> for finding and reporting this issue, along with a detailed reproducer. Same diff from deraadt@ ok tb@
Diffstat (limited to 'src/lib/libcrypto/objects/obj_dat.c')
0 files changed, 0 insertions, 0 deletions