[openssl/openssl] f3fc58: poly1305-ppc.pl: Fix vector register clobbering

[Tomáš Mráz]

  Branch: refs/heads/openssl-3.1
  Home:   https://github.com/openssl/openssl
  Commit: f3fc5808fe9ff74042d639839610d03b8fdcc015
      https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015
  Author: Rohan McLure <rmclure at linux.ibm.com>
  Date:   2024-01-09 (Tue, 09 Jan 2024)

  Changed paths:
    M crypto/poly1305/asm/poly1305-ppc.pl

  Log Message:
  -----------
  poly1305-ppc.pl: Fix vector register clobbering

Fixes CVE-2023-6129

The POLY1305 MAC (message authentication code) implementation in OpenSSL for
PowerPC CPUs saves the the contents of vector registers in different order
than they are restored. Thus the contents of some of these vector registers
is corrupted when returning to the caller. The vulnerable code is used only
on newer PowerPC processors supporting the PowerISA 2.07 instructions.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Richard Levitte <levitte at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23200)

(cherry picked from commit 8d847a3ffd4f0b17ee33962cf69c36224925b34f)


  Commit: bee1e83a18d6820b4264cbefca9ff5576ff679c2
      https://github.com/openssl/openssl/commit/bee1e83a18d6820b4264cbefca9ff5576ff679c2
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-01-09 (Tue, 09 Jan 2024)

  Changed paths:
    M CHANGES.md
    M NEWS.md

  Log Message:
  -----------
  Add CHANGES.md and NEWS.md entries for CVE-2023-6129

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23200)

(cherry picked from commit 858c7bc210a406cc7f891ac2aed78692d2e02937)


Compare: https://github.com/openssl/openssl/compare/010886025220...bee1e83a18d6