Fine reading of manual suggests that km can return non-normal completion code.

diff --git a/crypto/aes/asm/aes-s390x.pl b/crypto/aes/asm/aes-s390x.pl
index 3fcb9a6c299b70298f25d6032c6c6393d1fbb96b..c09e140e615d2c11480d2ccb28e8deac3aa7890c 100644 (file)
--- a/crypto/aes/asm/aes-s390x.pl
+++ b/crypto/aes/asm/aes-s390x.pl
@@ -143,7 +143,7 @@ AES_encrypt:
        la      %r4,0($out)
        lghi    %r3,16          # single block length
        .long   0xb92e0042      # km %r4,%r2
-       br      %r14
+       bcr     8,%r14
 .Lesoft:
        stmg    %r3,%r15,24($sp)
 
@@ -452,7 +452,7 @@ AES_decrypt:
        la      %r4,0($out)
        lghi    %r3,16          # single block length
        .long   0xb92e0042      # km %r4,%r2
-       br      %r14
+       bcr     8,%r14
 .Ldsoft:
        stmg    %r3,%r15,24($sp)