From: Stefan Berger <stefanb@linux.ibm.com>
To: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>,
linux-integrity@vger.kernel.org
Cc: linux-security-module@vger.kernel.org,
James Bottomley <James.Bottomley@HansenPartnership.com>,
Tomas Winkler <tomas.winkler@intel.com>,
Tadeusz Struk <tadeusz.struk@intel.com>,
Stefan Berger <stefanb@linux.vnet.ibm.com>,
Nayna Jain <nayna@linux.ibm.com>, Peter Huewe <peterhuewe@gmx.de>,
Jason Gunthorpe <jgg@ziepe.ca>, Arnd Bergmann <arnd@arndb.de>,
Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
open list <linux-kernel@vger.kernel.org>
Subject: Re: [PATCH v5 13/17] tpm: use tpm_try_get_ops() in tpm-sysfs.c.
Date: Thu, 8 Nov 2018 10:26:18 -0500 [thread overview]
Message-ID: <cece04be-14f0-bbb4-db74-5e286f7b2b48@linux.ibm.com> (raw)
In-Reply-To: <20181108141541.12832-14-jarkko.sakkinen@linux.intel.com>
On 11/8/18 9:15 AM, Jarkko Sakkinen wrote:
> Use tpm_try_get_ops() in tpm-sysfs.c so that we can consider moving
> other decorations (locking, localities, power management for example)
> inside it. This direction can be of course taken only after other call
> sites for tpm_transmit() have been treated in the same way.
>
> Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>
> ---
> drivers/char/tpm/tpm-sysfs.c | 123 ++++++++++++++++++++++-------------
> 1 file changed, 78 insertions(+), 45 deletions(-)
>
> diff --git a/drivers/char/tpm/tpm-sysfs.c b/drivers/char/tpm/tpm-sysfs.c
> index 03e704f99ed6..3733491671ca 100644
> --- a/drivers/char/tpm/tpm-sysfs.c
> +++ b/drivers/char/tpm/tpm-sysfs.c
> @@ -39,7 +39,6 @@ static ssize_t pubek_show(struct device *dev, struct device_attribute *attr,
> {
> struct tpm_buf tpm_buf;
> struct tpm_readpubek_out *out;
> - ssize_t rc;
> int i;
> char *str = buf;
> struct tpm_chip *chip = to_tpm_chip(dev);
> @@ -47,17 +46,17 @@ static ssize_t pubek_show(struct device *dev, struct device_attribute *attr,
>
> memset(&anti_replay, 0, sizeof(anti_replay));
>
> - if (tpm_buf_init(&tpm_buf, TPM_TAG_RQU_COMMAND, TPM_ORD_READPUBEK))
> + if (tpm_try_get_ops(chip))
> return 0;
>
> + if (tpm_buf_init(&tpm_buf, TPM_TAG_RQU_COMMAND, TPM_ORD_READPUBEK))
> + goto out_ops;
> +
> tpm_buf_append(&tpm_buf, anti_replay, sizeof(anti_replay));
>
> - rc = tpm_transmit_cmd(chip, &tpm_buf, READ_PUBEK_RESULT_MIN_BODY_SIZE,
> - 0, "attempting to read the PUBEK");
> - if (rc) {
> - tpm_buf_destroy(&tpm_buf);
> - return 0;
> - }
> + if (tpm_transmit_cmd(chip, &tpm_buf, READ_PUBEK_RESULT_MIN_BODY_SIZE,
> + 0, "attempting to read the PUBEK"))
> + goto out_buf;
>
> out = (struct tpm_readpubek_out *)&tpm_buf.data[10];
> str +=
> @@ -88,9 +87,11 @@ static ssize_t pubek_show(struct device *dev, struct device_attribute *attr,
> str += sprintf(str, "\n");
> }
>
> - rc = str - buf;
> +out_buf:
> tpm_buf_destroy(&tpm_buf);
> - return rc;
> +out_ops:
> + tpm_put_ops(chip);
> + return str - buf;
> }
> static DEVICE_ATTR_RO(pubek);
>
> @@ -103,10 +104,15 @@ static ssize_t pcrs_show(struct device *dev, struct device_attribute *attr,
> char *str = buf;
> struct tpm_chip *chip = to_tpm_chip(dev);
>
> + if (tpm_try_get_ops(chip))
> + return 0;
> +
> if (tpm1_getcap(chip, TPM_CAP_PROP_PCR, &cap,
> "attempting to determine the number of PCRS",
> - sizeof(cap.num_pcrs)))
> + sizeof(cap.num_pcrs))) {
> + tpm_put_ops(chip);
> return 0;
> + }
>
> num_pcrs = be32_to_cpu(cap.num_pcrs);
> for (i = 0; i < num_pcrs; i++) {
> @@ -119,6 +125,7 @@ static ssize_t pcrs_show(struct device *dev, struct device_attribute *attr,
> str += sprintf(str, "%02X ", digest[j]);
> str += sprintf(str, "\n");
> }
> + tpm_put_ops(chip);
> return str - buf;
> }
> static DEVICE_ATTR_RO(pcrs);
> @@ -126,16 +133,21 @@ static DEVICE_ATTR_RO(pcrs);
> static ssize_t enabled_show(struct device *dev, struct device_attribute *attr,
> char *buf)
> {
> + struct tpm_chip *chip = to_tpm_chip(dev);
> + ssize_t rc = 0;
> cap_t cap;
> - ssize_t rc;
>
> - rc = tpm1_getcap(to_tpm_chip(dev), TPM_CAP_FLAG_PERM, &cap,
> - "attempting to determine the permanent enabled state",
> - sizeof(cap.perm_flags));
> - if (rc)
> + if (tpm_try_get_ops(chip))
> return 0;
>
> + if (tpm1_getcap(chip, TPM_CAP_FLAG_PERM, &cap,
> + "attempting to determine the permanent enabled state",
> + sizeof(cap.perm_flags)))
> + goto out_ops;
> +
> rc = sprintf(buf, "%d\n", !cap.perm_flags.disable);
> +out_ops:
> + tpm_put_ops(chip);
> return rc;
> }
> static DEVICE_ATTR_RO(enabled);
> @@ -143,16 +155,21 @@ static DEVICE_ATTR_RO(enabled);
> static ssize_t active_show(struct device *dev, struct device_attribute *attr,
> char *buf)
> {
> + struct tpm_chip *chip = to_tpm_chip(dev);
> + ssize_t rc = 0;
> cap_t cap;
> - ssize_t rc;
>
> - rc = tpm1_getcap(to_tpm_chip(dev), TPM_CAP_FLAG_PERM, &cap,
> - "attempting to determine the permanent active state",
> - sizeof(cap.perm_flags));
> - if (rc)
> + if (tpm_try_get_ops(chip))
> return 0;
>
> + if (tpm1_getcap(chip, TPM_CAP_FLAG_PERM, &cap,
> + "attempting to determine the permanent active state",
> + sizeof(cap.perm_flags)))
> + goto out_ops;
> +
> rc = sprintf(buf, "%d\n", !cap.perm_flags.deactivated);
> +out_ops:
> + tpm_put_ops(chip);
> return rc;
> }
> static DEVICE_ATTR_RO(active);
> @@ -160,16 +177,21 @@ static DEVICE_ATTR_RO(active);
> static ssize_t owned_show(struct device *dev, struct device_attribute *attr,
> char *buf)
> {
> + struct tpm_chip *chip = to_tpm_chip(dev);
> + ssize_t rc = 0;
> cap_t cap;
> - ssize_t rc;
>
> - rc = tpm1_getcap(to_tpm_chip(dev), TPM_CAP_PROP_OWNER, &cap,
> - "attempting to determine the owner state",
> - sizeof(cap.owned));
> - if (rc)
> + if (tpm_try_get_ops(chip))
> return 0;
>
> + if (tpm1_getcap(to_tpm_chip(dev), TPM_CAP_PROP_OWNER, &cap,
> + "attempting to determine the owner state",
> + sizeof(cap.owned)))
> + goto out_ops;
> +
> rc = sprintf(buf, "%d\n", cap.owned);
> +out_ops:
> + tpm_put_ops(chip);
> return rc;
> }
> static DEVICE_ATTR_RO(owned);
> @@ -177,16 +199,21 @@ static DEVICE_ATTR_RO(owned);
> static ssize_t temp_deactivated_show(struct device *dev,
> struct device_attribute *attr, char *buf)
> {
> + struct tpm_chip *chip = to_tpm_chip(dev);
> + ssize_t rc = 0;
> cap_t cap;
> - ssize_t rc;
>
> - rc = tpm1_getcap(to_tpm_chip(dev), TPM_CAP_FLAG_VOL, &cap,
> - "attempting to determine the temporary state",
> - sizeof(cap.stclear_flags));
> - if (rc)
> + if (tpm_try_get_ops(chip))
> return 0;
>
> + if (tpm1_getcap(to_tpm_chip(dev), TPM_CAP_FLAG_VOL, &cap,
> + "attempting to determine the temporary state",
> + sizeof(cap.stclear_flags)))
> + goto out_ops;
> +
> rc = sprintf(buf, "%d\n", cap.stclear_flags.deactivated);
> +out_ops:
> + tpm_put_ops(chip);
> return rc;
> }
> static DEVICE_ATTR_RO(temp_deactivated);
> @@ -195,15 +222,18 @@ static ssize_t caps_show(struct device *dev, struct device_attribute *attr,
> char *buf)
> {
> struct tpm_chip *chip = to_tpm_chip(dev);
> - cap_t cap;
> - ssize_t rc;
> + ssize_t rc = 0;
> char *str = buf;
> + cap_t cap;
>
> - rc = tpm1_getcap(chip, TPM_CAP_PROP_MANUFACTURER, &cap,
> - "attempting to determine the manufacturer",
> - sizeof(cap.manufacturer_id));
> - if (rc)
> + if (tpm_try_get_ops(chip))
> return 0;
> +
> + if (tpm1_getcap(chip, TPM_CAP_PROP_MANUFACTURER, &cap,
> + "attempting to determine the manufacturer",
> + sizeof(cap.manufacturer_id)))
> + goto out_ops;
> +
> str += sprintf(str, "Manufacturer: 0x%x\n",
> be32_to_cpu(cap.manufacturer_id));
>
> @@ -220,11 +250,10 @@ static ssize_t caps_show(struct device *dev, struct device_attribute *attr,
> cap.tpm_version_1_2.revMinor);
> } else {
> /* Otherwise just use TPM_STRUCT_VER */
> - rc = tpm1_getcap(chip, TPM_CAP_VERSION_1_1, &cap,
> - "attempting to determine the 1.1 version",
> - sizeof(cap.tpm_version));
> - if (rc)
> - return 0;
> + if (tpm1_getcap(chip, TPM_CAP_VERSION_1_1, &cap,
> + "attempting to determine the 1.1 version",
> + sizeof(cap.tpm_version)))
> + goto out_ops;
> str += sprintf(str,
> "TCG version: %d.%d\nFirmware version: %d.%d\n",
> cap.tpm_version.Major,
> @@ -232,8 +261,10 @@ static ssize_t caps_show(struct device *dev, struct device_attribute *attr,
> cap.tpm_version.revMajor,
> cap.tpm_version.revMinor);
> }
> -
> - return str - buf;
> + rc = str - buf;
> +out_ops:
> + tpm_put_ops(chip);
> + return rc;
> }
> static DEVICE_ATTR_RO(caps);
>
> @@ -241,10 +272,12 @@ static ssize_t cancel_store(struct device *dev, struct device_attribute *attr,
> const char *buf, size_t count)
> {
> struct tpm_chip *chip = to_tpm_chip(dev);
> - if (chip == NULL)
> +
> + if (tpm_try_get_ops(chip))
> return 0;
>
> chip->ops->cancel(chip);
> + tpm_put_ops(chip);
> return count;
> }
> static DEVICE_ATTR_WO(cancel);
next prev parent reply other threads:[~2018-11-08 15:26 UTC|newest]
Thread overview: 38+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-11-08 14:15 [PATCH v5 00/17] Remove nested TPM operations Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 01/17] tpm: use tpm_buf in tpm_transmit_cmd() as the IO parameter Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 02/17] tpm: fix invalid return value in pubek_show() Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 03/17] tpm: return 0 from pcrs_show() when tpm1_pcr_read() fails Jarkko Sakkinen
2018-11-08 14:52 ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 04/17] tpm: call tpm2_flush_space() on error in tpm_try_transmit() Jarkko Sakkinen
2018-11-08 14:55 ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 05/17] tpm: print tpm2_commit_space() error inside tpm2_commit_space() Jarkko Sakkinen
2018-11-08 14:56 ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 06/17] tpm: clean up tpm_try_transmit() error handling flow Jarkko Sakkinen
2018-11-08 14:59 ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 07/17] tpm: declare struct tpm_header Jarkko Sakkinen
2018-11-08 15:02 ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 08/17] tpm: access command header through struct in tpm_try_transmit() Jarkko Sakkinen
2018-11-08 15:03 ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 09/17] tpm: move tpm_validate_commmand() to tpm2-space.c Jarkko Sakkinen
2018-11-08 17:03 ` Winkler, Tomas
2018-11-08 23:07 ` Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 10/17] tpm: encapsulate tpm_dev_transmit() Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 11/17] tpm: move TPM space code out of tpm_transmit() Jarkko Sakkinen
2018-11-08 15:16 ` Stefan Berger
2018-11-08 18:58 ` Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 12/17] tpm: remove @space from tpm_transmit() Jarkko Sakkinen
2018-11-08 15:18 ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 13/17] tpm: use tpm_try_get_ops() in tpm-sysfs.c Jarkko Sakkinen
2018-11-08 15:26 ` Stefan Berger [this message]
2018-11-08 14:15 ` [PATCH v5 14/17] tpm: remove TPM_TRANSMIT_UNLOCKED flag Jarkko Sakkinen
2018-11-08 15:43 ` Stefan Berger
2018-11-08 19:02 ` Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 15/17] tpm: introduce tpm_chip_start() and tpm_chip_stop() Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 16/17] tpm: take TPM chip power gating out of tpm_transmit() Jarkko Sakkinen
2018-11-08 18:38 ` Winkler, Tomas
2018-11-08 23:07 ` Jarkko Sakkinen
2018-11-09 21:37 ` Winkler, Tomas
2018-11-13 11:12 ` Jarkko Sakkinen
2018-11-13 11:58 ` Winkler, Tomas
2018-11-13 15:52 ` Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 17/17] tpm: remove @flags from tpm_transmit() Jarkko Sakkinen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cece04be-14f0-bbb4-db74-5e286f7b2b48@linux.ibm.com \
--to=stefanb@linux.ibm.com \
--cc=James.Bottomley@HansenPartnership.com \
--cc=arnd@arndb.de \
--cc=gregkh@linuxfoundation.org \
--cc=jarkko.sakkinen@linux.intel.com \
--cc=jgg@ziepe.ca \
--cc=linux-integrity@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=nayna@linux.ibm.com \
--cc=peterhuewe@gmx.de \
--cc=stefanb@linux.vnet.ibm.com \
--cc=tadeusz.struk@intel.com \
--cc=tomas.winkler@intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).