diff options
| author | Andy Polyakov <appro@openssl.org> | 2017-08-17 21:08:57 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2017-11-02 11:00:48 +0000 |
| commit | 668a709a8d7ea374ee72ad2d43ac72ec60a80eee (patch) | |
| tree | ed346f3891b00e5d334cbd9687b921019e7478a8 /crypto/bn/asm/x86_64-mont5.pl | |
| parent | bd6eba79d70677f891f1bb55b6f5bc5602c47cbc (diff) | |
bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqrx8x_internal.
Credit to OSS-Fuzz for finding this.
CVE-2017-3736
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'crypto/bn/asm/x86_64-mont5.pl')
| -rwxr-xr-x | crypto/bn/asm/x86_64-mont5.pl | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/crypto/bn/asm/x86_64-mont5.pl b/crypto/bn/asm/x86_64-mont5.pl index 9c77642b71..1666fbd7a2 100755 --- a/crypto/bn/asm/x86_64-mont5.pl +++ b/crypto/bn/asm/x86_64-mont5.pl @@ -3206,11 +3206,19 @@ $code.=<<___; .align 32 .Lsqrx8x_break: - sub 16+8(%rsp),%r8 # consume last carry + xor $zero,$zero + sub 16+8(%rsp),%rbx # mov 16(%rsp),%cf + adcx $zero,%r8 mov 24+8(%rsp),$carry # initial $tptr, borrow $carry + adcx $zero,%r9 mov 0*8($aptr),%rdx # a[8], modulo-scheduled - xor %ebp,%ebp # xor $zero,$zero + adc \$0,%r10 mov %r8,0*8($tptr) + adc \$0,%r11 + adc \$0,%r12 + adc \$0,%r13 + adc \$0,%r14 + adc \$0,%r15 cmp $carry,$tptr # cf=0, of=0 je .Lsqrx8x_outer_loop |