about summary refs log tree commit diff
path: root/sysdeps/unix/sysv/linux/mq_open.c
diff options
context:
space:
mode:
authorH.J. Lu <hjl.tools@gmail.com>2023-12-20 19:42:12 -0800
committerH.J. Lu <hjl.tools@gmail.com>2023-12-23 07:50:29 -0800
commit5d1fe26b49a9ac373dabba217df9bd7179b267d2 (patch)
treef47ef045225a400afd87f26e1c1b921aa7b00667 /sysdeps/unix/sysv/linux/mq_open.c
parent2d87262c1c4ed877a51a4689db0ac2e08fba2f43 (diff)
downloadglibc-5d1fe26b49a9ac373dabba217df9bd7179b267d2.tar.gz
glibc-5d1fe26b49a9ac373dabba217df9bd7179b267d2.tar.xz
glibc-5d1fe26b49a9ac373dabba217df9bd7179b267d2.zip
x86-64: Fix the tcb field load for x32 [BZ #31185]
_dl_tlsdesc_undefweak and _dl_tlsdesc_dynamic access the thread pointer
via the tcb field in TCB:

_dl_tlsdesc_undefweak:
        _CET_ENDBR
        movq    8(%rax), %rax
        subq    %fs:0, %rax
        ret

_dl_tlsdesc_dynamic:
	...
        subq    %fs:0, %rax
        movq    -8(%rsp), %rdi
        ret

Since the tcb field in TCB is a pointer, %fs:0 is a 32-bit location,
not 64-bit. It should use "sub %fs:0, %RAX_LP" instead.  Since
_dl_tlsdesc_undefweak returns ptrdiff_t and _dl_make_tlsdesc_dynamic
returns void *, RAX_LP is appropriate here for x32 and x86-64.  This
fixes BZ #31185.

(cherry picked from commit 81be2a61dafc168327c1639e97b6dae128c7ccf3)
Diffstat (limited to 'sysdeps/unix/sysv/linux/mq_open.c')
0 files changed, 0 insertions, 0 deletions