)]}'
{
  "commit": "d84cb4d163d0df7ff6b703fbd180b14137c2f8f4",
  "tree": "a59238c0f693077f53d3b6fe1048c3edabaa642a",
  "parents": [
    "e0c533aa237047bf419c776adc549d8863238981"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Mon May 20 15:11:12 2019 -0400"
  },
  "committer": {
    "name": "CQ bot account: commit-bot@chromium.org",
    "email": "commit-bot@chromium.org",
    "time": "Mon May 20 19:36:11 2019 +0000"
  },
  "message": "Sync aesp8-ppc.pl with upstream.\n\nThis pulls in the following commits from upstream:\n5dcfd6c50a216f81bf43e1f21bc5f3fc517ba47a,\n41013cd63c068e2f271fabc92702ee67d800f0cb,\n83cf7abf8e9abbd4d0b68c63dc1cb43374aafe63, and\n13f6857db107b1b6f68daa7fc4a6dd1293428bb1. Of these, the first fixes a bug:\n\ncommit 5dcfd6c50a216f81bf43e1f21bc5f3fc517ba47a\nAuthor: Daniel Axtens \u003cdja@axtens.net\u003e\nDate:   Mon Mar 18 10:22:44 2019 +1100\n\n    PPC assembly pack: fix copy-paste error in CTR mode\n\n    There are two copy-paste errors in handling CTR mode. When dealing\n    with a 2 or 3 block tail, the code branches to the CBC decryption exit\n    path, rather than to the CTR exit path.\n\n    This can lead to data corruption: in the Linux kernel we have a copy\n    of this file, and the bug leads to corruption of the IV, which leads\n    to data corruption when we call the encryption function again later to\n    encrypt subsequent blocks.\n\n    Originally reported to the Linux kernel by Ondrej Mosnáček \u003comosnacek@gmail.com\u003e\n\nThis bug does not appear to have practical impact the way the function is used\nin BoringSSL/OpenSSL. Unlike the CBC functions, the CTR32 functions do not\nupdate the IV, which is the only difference between their epilogs. However, all\nthe callers either use a temporary buffer for the IV or clobber the counter\nportion of the IV with an updated value anyway. (Confirmed that\nCipherTest.TestVectors hits this case with AES-GCM and that the clobbered IV\nmatches in all but the counter portion.)\n\nChange-Id: I25b781152c578155e0bcb0ee1c6d967e9e8cea88\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/36104\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "7f06720cd6b8f39eae9cd55be59cf87925c037b8",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/aes/asm/aesp8-ppc.pl",
      "new_id": "62d4842b91b241e7deeb2c4d936ad7b7419a4718",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/aes/asm/aesp8-ppc.pl"
    }
  ]
}
