x86-64 memcpy: Properly handle the length parameter [BZ #24097]

[thirdparty/glibc.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 81555f1675a7bcb00e697d0eb6626731a4d6fec1..1751d28bcb445c71aa8f2d19d6d3ae9464c82896 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,117 @@
+2019-02-01  H.J. Lu  <hongjiu.lu@intel.com>
+
+       [BZ #24097]
+       CVE-2019-6488
+       * sysdeps/x86_64/multiarch/memcpy-ssse3-back.S: Use RDX_LP for
+       length.  Clear the upper 32 bits of RDX register.
+       * sysdeps/x86_64/multiarch/memcpy-ssse3.S: Likewise.
+       * sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S:
+       Likewise.
+       * sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:
+       Likewise.
+       * sysdeps/x86_64/x32/Makefile (tests): Add tst-size_t-memcpy.
+       tst-size_t-wmemchr.
+       * sysdeps/x86_64/x32/tst-size_t-memcpy.c: New file.
+
+2019-02-01  H.J. Lu  <hongjiu.lu@intel.com>
+
+       [BZ #24097]
+       CVE-2019-6488
+       * sysdeps/x86_64/multiarch/memcmp-avx2-movbe.S: Use RDX_LP for
+       length.  Clear the upper 32 bits of RDX register.
+       * sysdeps/x86_64/multiarch/memcmp-sse4.S: Likewise.
+       * sysdeps/x86_64/multiarch/memcmp-ssse3.S: Likewise.
+       * sysdeps/x86_64/x32/Makefile (tests): Add tst-size_t-memcmp and
+       tst-size_t-wmemcmp.
+       * sysdeps/x86_64/x32/tst-size_t-memcmp.c: New file.
+       * sysdeps/x86_64/x32/tst-size_t-wmemcmp.c: Likewise.
+
+2019-02-01  H.J. Lu  <hongjiu.lu@intel.com>
+
+       [BZ #24097]
+       CVE-2019-6488
+       * sysdeps/x86_64/memchr.S: Use RDX_LP for length.  Clear the
+       upper 32 bits of RDX register.
+       * sysdeps/x86_64/multiarch/memchr-avx2.S: Likewise.
+       * sysdeps/x86_64/x32/Makefile (tests): Add tst-size_t-memchr and
+       tst-size_t-wmemchr.
+       * sysdeps/x86_64/x32/test-size_t.h: New file.
+       * sysdeps/x86_64/x32/tst-size_t-memchr.c: Likewise.
+       * sysdeps/x86_64/x32/tst-size_t-wmemchr.c: Likewise.
+
+2019-01-16  Tulio Magno Quites Machado Filho  <tuliom@linux.ibm.com>
+
+       * math/libm-test-fma.inc (fma_test_data): Set
+       XFAIL_ROUNDING_IBM128_LIBGCC to more tests.
+
+2019-01-07  Aurelien Jarno  <aurelien@aurel32.net>
+
+       [BZ #24024]
+       * Makeconfig: Build libm with -fno-math-errno but build the remaining
+       code with -fmath-errno.
+       * string/Makefile [$(build-shared)] (tests): Add test-strerror-errno.
+       [$(build-shared)] (LDLIBS-test-strerror-errno): New variable.
+       * string/test-strerror-errno.c: New file.
+
+2019-01-03  Martin Jansa  <Martin.Jansa@gmail.com>
+
+       [BZ #19444]
+       * sysdeps/ieee754/soft-fp/s_fdiv.c: Include <libc-diag.h> and use
+       DIAG_PUSH_NEEDS_COMMENT, DIAG_IGNORE_NEEDS_COMMENT and
+       DIAG_POP_NEEDS_COMMENT to disable -Wmaybe-uninitialized.
+
+2019-01-02  Aurelien Jarno  <aurelien@aurel32.net>
+
+       [BZ #24034]
+       * sysdeps/unix/sysv/linux/arm/atomic-machine.h
+       (__arm_assisted_compare_and_exchange_val_32_acq): Use uint32_t rather
+       than __typeof (...) for the a_ptr variable.
+
+2018-12-31  H.J. Lu  <hongjiu.lu@intel.com>
+
+       [BZ #24022]
+       * sysdeps/unix/sysv/linux/riscv/flush-icache.c: Check if
+       <asm/syscalls.h> exists with __has_include__ before including it.
+
+2019-01-02  Florian Weimer  <fweimer@redhat.com>
+
+       [BZ #24018]
+       * intl/dcigettext.c (DCIGETTEXT): Do not return NULL on asprintf
+       failure.
+
+2018-12-31  Florian Weimer  <fw@deneb.enyo.de>
+
+       [BZ #24027]
+       * malloc/malloc.c (_int_realloc): Always call memcpy for the
+       copying operation.  (ncopies had the wrong type, resulting in an
+       integer wraparound and too few elements being copied.)
+
+2018-12-28  Aurelien Jarno  <aurelien@aurel32.net>
+
+       * sysdeps/alpha/fpu/libm-test-ulps: Regenerated.
+
+2018-12-18  Adhemerval Zanella  <adhemerval.zanella@linaro.org>
+           James Clarke  <jrtc27@jrtc27.com>
+
+       [BZ #23967]
+       * sysdeps/unix/sysv/linux/kernel_sigaction.h (HAS_SA_RESTORER):
+       Define if SA_RESTORER is defined.
+       (kernel_sigaction): Define sa_restorer if HAS_SA_RESTORER is defined.
+       (SET_SA_RESTORER, RESET_SA_RESTORER): Define iff the macro are not
+       already defined.
+       * sysdeps/unix/sysv/linux/m68k/kernel_sigaction.h (SA_RESTORER,
+       kernel_sigaction, SET_SA_RESTORER, RESET_SA_RESTORER): Remove
+       definitions.
+       (HAS_SA_RESTORER): Define.
+       * sysdeps/unix/sysv/linux/sparc/kernel_sigaction.h (SA_RESTORER,
+       SET_SA_RESTORER, RESET_SA_RESTORER): Remove definition.
+       (HAS_SA_RESTORER): Define.
+       * sysdeps/unix/sysv/linux/nios2/kernel_sigaction.h: Include generic
+       kernel_sigaction after define SET_SA_RESTORER and RESET_SA_RESTORER.
+       * sysdeps/unix/sysv/linux/powerpc/kernel_sigaction.h: Likewise.
+       * sysdeps/unix/sysv/linux/s390/kernel_sigaction.h: Likewise.
+       * sysdeps/unix/sysv/linux/x86_64/sigaction.c: Likewise.
+
 2018-10-30  Andreas Schwab  <schwab@suse.de>
 
        [BZ #23125]