8390765: [PPC64] AES Crypto intrinsics may access memory beyond the key array

[TheRealMDoerr]

Clean backport of JDK-8390765.

---

• I confirm that I make this contribution in accordance with the OpenJDK Interim AI Policy.

---

Progress

• Change must not contain extraneous whitespace
• Commit message must refer to an issue
• JDK-8390765 needs maintainer approval

Issue

• JDK-8390765: [PPC64] AES Crypto intrinsics may access memory beyond the key array (Bug - P3 - Approved)

Reviewing

Using git

Checkout this PR locally:
$ git fetch https://git.openjdk.org/jdk27u.git pull/89/head:pull/89
$ git checkout pull/89

Update a local copy of the PR:
$ git checkout pull/89
$ git pull https://git.openjdk.org/jdk27u.git pull/89/head

Using Skara CLI tools

Checkout this PR locally:
$ git pr checkout 89

View PR using the GUI difftool:
$ git pr show -t 89

Using diff file

Download this PR as a diff file:
https://git.openjdk.org/jdk27u/pull/89.diff

Using Webrev

Link to Webrev Comment

[bridgekeeper]

👋 Welcome back mdoerr! A progress list of the required criteria for merging this PR into master will be added to the body of your pull request. There are additional pull request commands available for use with this pull request.

[openjdk]

@TheRealMDoerr This change now passes all automated pre-integration checks.

ℹ️ This project also has non-automated pre-integration requirements. Please see the file CONTRIBUTING.md for details.

After integration, the commit message for the final commit will be:

8390765: [PPC64] AES Crypto intrinsics may access memory beyond the key array

You can use pull request commands such as /contributor and /issue to adjust it as needed.

At the time when this comment was updated there had been 3 new commits pushed to the master branch:

• 903b4f4: 8387324: jlink --strip-debug should filter external debug symbols
• 868c819: 8390132: Test runtime/cds/appcds/ClassPathAttrCircularReference.java "written dynamic archive" missing in output
• d8d8bee: 8391041: RISC-V: Fix out-of-bounds read in string_indexof_char intrinsic

Please see this link for an up-to-date comparison between the source branch of this pull request and the master branch.
As there are no conflicts, your changes will automatically be rebased on top of these commits when integrating. If you prefer to avoid this automatic rebasing, please check the documentation for the /integrate command for further details.

➡️ To integrate this PR with the above commit message to the master branch, type /integrate in a new comment.

[openjdk]

This backport pull request has now been updated with issue from the original commit.

[openjdk]

⚠️ @TheRealMDoerr This change is now ready for you to apply for maintainer approval. This can be done directly in each associated issue or by using the /approval command.

[mlbridge]

Webrevs

• 00: Full (64deb21d)

[TheRealMDoerr]

/approval request This fix is required to prevent VM crashes in rare cases on PPC64 platforms. JDK27 is affected. The backport applies cleanly and tests have passed on linux ppc64le and AIX. No risk for other platforms because the patch only touches PPC64 files. The stubs can be disabled in case of problems on PPC64.

[openjdk]

@TheRealMDoerr
8390765: The approval request has been created successfully.