crypto: x86/aria - Use 16 byte alignment for GFNI constant vectors
authorArd Biesheuvel <ardb@kernel.org>
Tue, 16 May 2023 18:14:19 +0000 (20:14 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Wed, 24 May 2023 10:10:27 +0000 (18:10 +0800)
commit6ab39f99927eed605728b02d512438d828183c97
treea88b5703d98fcbd4bcbc3fe915f67b9d6fdf74b5
parentb8969a1b69672b163d057e7745ebc915df689211
crypto: x86/aria - Use 16 byte alignment for GFNI constant vectors

The GFNI routines in the AVX version of the ARIA implementation now use
explicit VMOVDQA instructions to load the constant input vectors, which
means they must be 16 byte aligned. So ensure that this is the case, by
dropping the section split and the incorrect .align 8 directive, and
emitting the constants into the 16-byte aligned section instead.

Note that the AVX2 version of this code deviates from this pattern, and
does not require a similar fix, given that it loads these contants as
8-byte memory operands, for which AVX2 permits any alignment.

Cc: Taehee Yoo <ap420073@gmail.com>
Fixes: 8b84475318641c2b ("crypto: x86/aria-avx - Do not use avx2 instructions")
Reported-by: syzbot+a6abcf08bad8b18fd198@syzkaller.appspotmail.com
Tested-by: syzbot+a6abcf08bad8b18fd198@syzkaller.appspotmail.com
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
arch/x86/crypto/aria-aesni-avx-asm_64.S