Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 3 Jun 2025 00:17:26 +0000
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Robert Clausecker <fuz@freebsd.org>
Cc:        src-committers@freebsd.org, dev-commits-src-all@freebsd.org,  dev-commits-src-main@freebsd.org
Subject:   Re: git: e698e4a53773 - main - lib/libmd: disable SHA1 AVX2 kernel
Message-ID:  <iswwxq67opsuxidiehxizr7yg6em2obolcw2qx5d5rb2op5xij@wvozbns6esrt>
In-Reply-To: <202506022333.552NX1uN061534@gitrepo.freebsd.org>
References:  <202506022333.552NX1uN061534@gitrepo.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--7vlczqi2qndlalfv
Content-Type: text/plain; protected-headers=v1; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Subject: Re: git: e698e4a53773 - main - lib/libmd: disable SHA1 AVX2 kernel
MIME-Version: 1.0

On Mon, Jun 02, 2025 at 11:33:01PM +0000, Robert Clausecker wrote:
> The branch main has been updated by fuz:
>=20
> URL: https://cgit.FreeBSD.org/src/commit/?id=3De698e4a537736f6a7dd9a386e0=
0997d7fb08e83f
>=20
> commit e698e4a537736f6a7dd9a386e00997d7fb08e83f
> Author:     Robert Clausecker <fuz@FreeBSD.org>
> AuthorDate: 2025-06-02 22:54:32 +0000
> Commit:     Robert Clausecker <fuz@FreeBSD.org>
> CommitDate: 2025-06-02 23:27:00 +0000
>=20
>     lib/libmd: disable SHA1 AVX2 kernel
>    =20
>     Seems like there is a bug lurking somewhere in the code.  This was not
>     caught during my testing.  Disable the affected kernel for now while I
>     figure out what is wrong with it.
>    =20
>     To reproduce, run
>    =20
>         jot -s '' -b 'a' -n 1000000 | sha1
>    =20
>     This should yield 34aa973cd4c4daa4f61eeb2bdbad27316534016f, but gives
>     fe161a71d7941e3d63a9cacadc4f20716a721944 with the broken code.  Only =
the
>     amd64/avx2 kernel is affected, the others seem to operate correctly.

Out of curiosity, how would one best determine whether they're
affected? Would it be a part of the CPU features shown in
/var/run/dmesg.boot?

Thanks,

--=20
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

Signal Username:  shawn_webb.74
Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50
https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A=
4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

--7vlczqi2qndlalfv
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=FCgL
-----END PGP SIGNATURE-----

--7vlczqi2qndlalfv--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?iswwxq67opsuxidiehxizr7yg6em2obolcw2qx5d5rb2op5xij>