diff options
| author | Andreas Schwab <schwab@suse.de> | 2018-05-24 14:39:18 +0200 |
|---|---|---|
| committer | Fangrui Song <i@maskray.me> | 2021-08-27 16:22:13 -0700 |
| commit | c4fde9669a5782479c1d6bd964b6339b5130b7e2 (patch) | |
| tree | edd8dca3bce8a748c74bb7a94d2386597244e08b /sysdeps | |
| parent | da768de04f2cdbf6117bddb7a23593d6fb4356fb (diff) | |
| download | glibc-c4fde9669a5782479c1d6bd964b6339b5130b7e2.zip glibc-c4fde9669a5782479c1d6bd964b6339b5130b7e2.tar.gz glibc-c4fde9669a5782479c1d6bd964b6339b5130b7e2.tar.bz2 | |
Don't write beyond destination in __mempcpy_avx512_no_vzeroupper (bug 23196)
When compiled as mempcpy, the return value is the end of the destination
buffer, thus it cannot be used to refer to the start of it.
(cherry picked from commit 9aaaab7c6e4176e61c59b0a63c6ba906d875dc0e)
Diffstat (limited to 'sysdeps')
| -rw-r--r-- | sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S b/sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S index 23c0f7a..effc3ac 100644 --- a/sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S +++ b/sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S @@ -336,6 +336,7 @@ L(preloop_large): vmovups (%rsi), %zmm4 vmovups 0x40(%rsi), %zmm5 + mov %rdi, %r11 /* Align destination for access with non-temporal stores in the loop. */ mov %rdi, %r8 and $-0x80, %rdi @@ -366,8 +367,8 @@ L(gobble_256bytes_nt_loop): cmp $256, %rdx ja L(gobble_256bytes_nt_loop) sfence - vmovups %zmm4, (%rax) - vmovups %zmm5, 0x40(%rax) + vmovups %zmm4, (%r11) + vmovups %zmm5, 0x40(%r11) jmp L(check) L(preloop_large_bkw): |