Sachin Monga e622f82ea8 powerpc: Fix one byte overread in strncasecmp (bug 34683, CVE-2026-97399) ...

The Power8 strncasecmp (strcasecmp.S with USE_AS_STRNCASECMP) touches
s1[n]/s2[n] in three places when the first n bytes compare equal and
contain no NUL: L(loop) preloads the next byte before its bdnz;
L(loop1) increments then loads before its bdnz; and L(bytebybyte) loads
s1[0]/s2[0] before checking r5. A caller that maps exactly n readable bytes
can get SIGSEGV if byte n falls on an unmapped page.

The L(bytebybyte) site was identified by Florian Weimer; the
original AISLE report covered only the two loops.

Fix all three sites: guard L(bytebybyte) with a r5 == 0 check, split the
bdnz/load pairs in L(loop) and L(loop1) so the load only runs when the
count is still positive, and preload rCHAR1/rCHAR2 in L(lessthan4) after
confirming r5 != 0.  strcasecmp is unaffected; its generated code is
unchanged.

Add string/test-strncasecmp-nonarray.c, built on the test-Xncmp-nonarray.c
skeleton: maps a PROT_NONE page past both buffers and sweeps all start
offsets and lengths.  Runs as an xtest.

Reported-by: AISLE in partnership with Red Hat
Suggested-by: Florian Weimer <fweimer@redhat.com>

2026-10-01 00:52:07 +05:30

..

bits

string: Declare Issue 8 functions for POSIX.1-2024 [BZ #34466]

2026-08-21 14:34:34 -03:00

_strerror.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-addsep.c

string: Fix memory leak in argz-addsep.c

2026-07-03 14:55:43 -03:00

argz-append.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-count.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-create.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-ctsep.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-delete.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-extract.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-insert.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-next.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-replace.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz-stringify.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

argz.h

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

basename.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

bcopy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

bug-envz1.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

bug-strcoll1.c

Update.

2001-04-26 20:45:18 +00:00

bug-strcoll2.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

bug-strncat1.c

string: Fix bug-strncat1 with fortify enabled

2023-07-24 15:26:17 -03:00

bug-strpbrk1.c

Remove "Contributed by" lines

2021-09-03 22:06:44 +05:30

bug-strspn1.c

Remove "Contributed by" lines

2021-09-03 22:06:44 +05:30

bug-strtok1.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

byteswap.h

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

bzero.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

Depend

Update.

2001-03-19 21:40:15 +00:00

endian.h

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

envz.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

envz.h

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

explicit_bzero.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

ffs.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

ffsll.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

inl-tester.c

Update.

1997-09-11 12:09:10 +00:00

Makefile

powerpc: Fix one byte overread in strncasecmp (bug 34683, CVE-2026-97399)

2026-10-01 00:52:07 +05:30

memccpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memcmp.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memcmpeq.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memfrob.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memmem.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memmove.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memory.h

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

mempcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memrchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memset_explicit.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

memset.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

noinl-tester.c

Update.

1997-09-16 00:42:43 +00:00

rawmemchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

sigabbrev_np.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

sigdescr_np.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

stpcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

stpncpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

str-two-way.h

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

stratcliff.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcasecmp_l.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcasecmp.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcasestr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcat.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strchrnul.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcmp.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcoll_l.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcoll.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strcspn.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strdup.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strerror_l.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strerror.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strerrordesc_np.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strerrorname_np.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strfry.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

string-inlines.c

s390: Remove s390-32 specific code in non s390-32 specific files

2026-04-20 13:54:14 +02:00

string.h

string: Declare Issue 8 functions for POSIX.1-2024 [BZ #34466]

2026-08-21 14:34:34 -03:00

strings.h

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strlcat.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strlcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strlen.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strncase_l.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strncase.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strncat.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strncmp.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strncpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strndup.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strnlen.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strpbrk.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strrchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strsep.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strsignal.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strspn.c

string: vectorize strspn single-accept-char case

2026-08-21 14:34:23 -03:00

strstr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strtok_r.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strtok.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strverscmp.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strxfrm_l.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

strxfrm.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

swab.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-bcopy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-bzero.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-endian-file-scope.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-endian-sign-conversion.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-endian-types.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-explicit_bzero.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-ffs.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memccpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memchr.c

string: Improve memchr random test

2026-06-18 19:44:31 +00:00

test-memcmp.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memcmpeq.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memcpy-large.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memcpy-support.h

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memmem.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memmove.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-mempcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memrchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memset_explicit.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memset.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-memswap.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-rawmemchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-sig_np.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-stpcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-stpncpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strcasecmp.c

string: Speed up strcasecmp test data initialization

2026-08-07 10:47:23 -03:00

test-strcasestr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strcat.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strchrnul.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strcmp.c

string: Speed up strcmp test data initialization

2026-08-07 10:47:15 -03:00

test-strcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strcspn.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strdup.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strerror-errno.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-string.h

string: Improve test-memchr page cross checks

2026-05-21 16:13:07 +00:00

test-strlen.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strncasecmp-nonarray.c

powerpc: Fix one byte overread in strncasecmp (bug 34683, CVE-2026-97399)

2026-10-01 00:52:07 +05:30

test-strncasecmp.c

string: Speed up strcasecmp test data initialization

2026-08-07 10:47:23 -03:00

test-strncat.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strncmp-nonarray.c

Enhanced test coverage for strncmp, wcsncmp

2024-08-01 09:08:32 +02:00

test-strncmp.c

string: Speed up strcmp test data initialization

2026-08-07 10:47:15 -03:00

test-strncpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strndup.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strnlen-nonarray.c

Enhance test coverage for strnlen, wcsnlen

2024-08-01 09:07:34 +02:00

test-strnlen.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strpbrk.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strrchr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strspn.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-strstr.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-Xncmp-nonarray.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

test-Xnlen-nonarray.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

testcopy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tester.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-bswap.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-cmp.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-const.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-endian.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

tst-inlcall.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-memmove-overflow.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strcoll-overflow.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strerror-fail.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strerror.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strfry.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

tst-string-posix2024-fortify.c

string: Declare Issue 8 functions for POSIX.1-2024 [BZ #34466]

2026-08-21 14:34:34 -03:00

tst-string-posix2024-main.c

string: Declare Issue 8 functions for POSIX.1-2024 [BZ #34466]

2026-08-21 14:34:34 -03:00

tst-string-posix2024.c

string: Declare Issue 8 functions for POSIX.1-2024 [BZ #34466]

2026-08-21 14:34:34 -03:00

tst-string-xopen2024.c

string: Declare Issue 8 functions for POSIX.1-2024 [BZ #34466]

2026-08-21 14:34:34 -03:00

tst-strlcat2.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strlcat.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strlcpy2.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strlcpy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strlen.c

Use '%z' instead of '%Z' on printf functions

2022-09-22 08:48:04 -03:00

tst-strsignal.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strtok_r.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

tst-strtok.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

tst-strxfrm2.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

tst-strxfrm.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

tst-svc2.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

tst-svc.c

Update string tests to use the support test driver.

2017-03-23 11:32:29 -03:00

tst-svc.expect

* string/strverscmp.c (__strverscmp): Fix last cleanups.

2009-04-07 06:51:59 +00:00

tst-svc.input

* string/strverscmp.c (__strverscmp): Fix last cleanups.

2009-04-07 06:51:59 +00:00

tst-xbzero-opt.c

string: Drop always_inline from tst-xbzero-opt [BZ #23130]

2026-09-25 06:13:56 -05:00

tst-xmemset-opt.c

Implement C23 memset_explicit (bug 32378)

2025-10-01 15:14:09 +00:00

Versions

Implement C23 memset_explicit (bug 32378)

2025-10-01 15:14:09 +00:00

wordcopy.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00

xpg-strerror.c

Update copyright dates with scripts/update-copyrights

2026-01-01 13:42:29 -08:00