On Sun, Jun 06, 2021 at 10:18:34AM +0200, Jan Gruber wrote:
>...
> Therefore it looks like to me, that the error stems from some
> changes related to glibc 2.31-11 (or maybe even the kernel in Version
> 5.10.0.6).
>...

Everything about this bug looks like better compiler optimization 
hitting code with a latent bug, and as expected using either gcc-9
or -O2 "fixes" the problem.

-fsanitize=undefined finds:
util.h:11:26: runtime error: shift exponent -8 is negative
util.h:11:44: runtime error: shift exponent -8 is negative

The buggy code is:
https://salsa.debian.org/pkg-security-team/aeskeyfind/-/blob/debian/master/aes.h#L14-15
https://salsa.debian.org/pkg-security-team/aeskeyfind/-/blob/debian/master/util.h#L11

> Best regards,
>    Jan
>...

cu
Adrian

Reply via email to