linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Stefan Berger <stefanb@linux.ibm.com>
To: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>,
	linux-integrity@vger.kernel.org
Cc: linux-security-module@vger.kernel.org,
	James Bottomley <James.Bottomley@HansenPartnership.com>,
	Tomas Winkler <tomas.winkler@intel.com>,
	Tadeusz Struk <tadeusz.struk@intel.com>,
	Stefan Berger <stefanb@linux.vnet.ibm.com>,
	Nayna Jain <nayna@linux.ibm.com>, Peter Huewe <peterhuewe@gmx.de>,
	Jason Gunthorpe <jgg@ziepe.ca>, Arnd Bergmann <arnd@arndb.de>,
	Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	open list <linux-kernel@vger.kernel.org>
Subject: Re: [PATCH v5 13/17] tpm: use tpm_try_get_ops() in tpm-sysfs.c.
Date: Thu, 8 Nov 2018 10:26:18 -0500	[thread overview]
Message-ID: <cece04be-14f0-bbb4-db74-5e286f7b2b48@linux.ibm.com> (raw)
In-Reply-To: <20181108141541.12832-14-jarkko.sakkinen@linux.intel.com>

On 11/8/18 9:15 AM, Jarkko Sakkinen wrote:
> Use tpm_try_get_ops() in tpm-sysfs.c so that we can consider moving
> other decorations (locking, localities, power management for example)
> inside it. This direction can be of course taken only after other call
> sites for tpm_transmit() have been treated in the same way.
>
> Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>

Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>

> ---
>   drivers/char/tpm/tpm-sysfs.c | 123 ++++++++++++++++++++++-------------
>   1 file changed, 78 insertions(+), 45 deletions(-)
>
> diff --git a/drivers/char/tpm/tpm-sysfs.c b/drivers/char/tpm/tpm-sysfs.c
> index 03e704f99ed6..3733491671ca 100644
> --- a/drivers/char/tpm/tpm-sysfs.c
> +++ b/drivers/char/tpm/tpm-sysfs.c
> @@ -39,7 +39,6 @@ static ssize_t pubek_show(struct device *dev, struct device_attribute *attr,
>   {
>   	struct tpm_buf tpm_buf;
>   	struct tpm_readpubek_out *out;
> -	ssize_t rc;
>   	int i;
>   	char *str = buf;
>   	struct tpm_chip *chip = to_tpm_chip(dev);
> @@ -47,17 +46,17 @@ static ssize_t pubek_show(struct device *dev, struct device_attribute *attr,
>
>   	memset(&anti_replay, 0, sizeof(anti_replay));
>
> -	if (tpm_buf_init(&tpm_buf, TPM_TAG_RQU_COMMAND, TPM_ORD_READPUBEK))
> +	if (tpm_try_get_ops(chip))
>   		return 0;
>
> +	if (tpm_buf_init(&tpm_buf, TPM_TAG_RQU_COMMAND, TPM_ORD_READPUBEK))
> +		goto out_ops;
> +
>   	tpm_buf_append(&tpm_buf, anti_replay, sizeof(anti_replay));
>
> -	rc = tpm_transmit_cmd(chip, &tpm_buf, READ_PUBEK_RESULT_MIN_BODY_SIZE,
> -			      0, "attempting to read the PUBEK");
> -	if (rc) {
> -		tpm_buf_destroy(&tpm_buf);
> -		return 0;
> -	}
> +	if (tpm_transmit_cmd(chip, &tpm_buf, READ_PUBEK_RESULT_MIN_BODY_SIZE,
> +			      0, "attempting to read the PUBEK"))
> +		goto out_buf;
>
>   	out = (struct tpm_readpubek_out *)&tpm_buf.data[10];
>   	str +=
> @@ -88,9 +87,11 @@ static ssize_t pubek_show(struct device *dev, struct device_attribute *attr,
>   			str += sprintf(str, "\n");
>   	}
>
> -	rc = str - buf;
> +out_buf:
>   	tpm_buf_destroy(&tpm_buf);
> -	return rc;
> +out_ops:
> +	tpm_put_ops(chip);
> +	return str - buf;
>   }
>   static DEVICE_ATTR_RO(pubek);
>
> @@ -103,10 +104,15 @@ static ssize_t pcrs_show(struct device *dev, struct device_attribute *attr,
>   	char *str = buf;
>   	struct tpm_chip *chip = to_tpm_chip(dev);
>
> +	if (tpm_try_get_ops(chip))
> +		return 0;
> +
>   	if (tpm1_getcap(chip, TPM_CAP_PROP_PCR, &cap,
>   			"attempting to determine the number of PCRS",
> -			sizeof(cap.num_pcrs)))
> +			sizeof(cap.num_pcrs))) {
> +		tpm_put_ops(chip);
>   		return 0;
> +	}
>
>   	num_pcrs = be32_to_cpu(cap.num_pcrs);
>   	for (i = 0; i < num_pcrs; i++) {
> @@ -119,6 +125,7 @@ static ssize_t pcrs_show(struct device *dev, struct device_attribute *attr,
>   			str += sprintf(str, "%02X ", digest[j]);
>   		str += sprintf(str, "\n");
>   	}
> +	tpm_put_ops(chip);
>   	return str - buf;
>   }
>   static DEVICE_ATTR_RO(pcrs);
> @@ -126,16 +133,21 @@ static DEVICE_ATTR_RO(pcrs);
>   static ssize_t enabled_show(struct device *dev, struct device_attribute *attr,
>   		     char *buf)
>   {
> +	struct tpm_chip *chip = to_tpm_chip(dev);
> +	ssize_t rc = 0;
>   	cap_t cap;
> -	ssize_t rc;
>
> -	rc = tpm1_getcap(to_tpm_chip(dev), TPM_CAP_FLAG_PERM, &cap,
> -			 "attempting to determine the permanent enabled state",
> -			 sizeof(cap.perm_flags));
> -	if (rc)
> +	if (tpm_try_get_ops(chip))
>   		return 0;
>
> +	if (tpm1_getcap(chip, TPM_CAP_FLAG_PERM, &cap,
> +			"attempting to determine the permanent enabled state",
> +			sizeof(cap.perm_flags)))
> +		goto out_ops;
> +
>   	rc = sprintf(buf, "%d\n", !cap.perm_flags.disable);
> +out_ops:
> +	tpm_put_ops(chip);
>   	return rc;
>   }
>   static DEVICE_ATTR_RO(enabled);
> @@ -143,16 +155,21 @@ static DEVICE_ATTR_RO(enabled);
>   static ssize_t active_show(struct device *dev, struct device_attribute *attr,
>   		    char *buf)
>   {
> +	struct tpm_chip *chip = to_tpm_chip(dev);
> +	ssize_t rc = 0;
>   	cap_t cap;
> -	ssize_t rc;
>
> -	rc = tpm1_getcap(to_tpm_chip(dev), TPM_CAP_FLAG_PERM, &cap,
> -			 "attempting to determine the permanent active state",
> -			 sizeof(cap.perm_flags));
> -	if (rc)
> +	if (tpm_try_get_ops(chip))
>   		return 0;
>
> +	if (tpm1_getcap(chip, TPM_CAP_FLAG_PERM, &cap,
> +			"attempting to determine the permanent active state",
> +			sizeof(cap.perm_flags)))
> +		goto out_ops;
> +
>   	rc = sprintf(buf, "%d\n", !cap.perm_flags.deactivated);
> +out_ops:
> +	tpm_put_ops(chip);
>   	return rc;
>   }
>   static DEVICE_ATTR_RO(active);
> @@ -160,16 +177,21 @@ static DEVICE_ATTR_RO(active);
>   static ssize_t owned_show(struct device *dev, struct device_attribute *attr,
>   			  char *buf)
>   {
> +	struct tpm_chip *chip = to_tpm_chip(dev);
> +	ssize_t rc = 0;
>   	cap_t cap;
> -	ssize_t rc;
>
> -	rc = tpm1_getcap(to_tpm_chip(dev), TPM_CAP_PROP_OWNER, &cap,
> -			 "attempting to determine the owner state",
> -			 sizeof(cap.owned));
> -	if (rc)
> +	if (tpm_try_get_ops(chip))
>   		return 0;
>
> +	if (tpm1_getcap(to_tpm_chip(dev), TPM_CAP_PROP_OWNER, &cap,
> +			"attempting to determine the owner state",
> +			sizeof(cap.owned)))
> +		goto out_ops;
> +
>   	rc = sprintf(buf, "%d\n", cap.owned);
> +out_ops:
> +	tpm_put_ops(chip);
>   	return rc;
>   }
>   static DEVICE_ATTR_RO(owned);
> @@ -177,16 +199,21 @@ static DEVICE_ATTR_RO(owned);
>   static ssize_t temp_deactivated_show(struct device *dev,
>   				     struct device_attribute *attr, char *buf)
>   {
> +	struct tpm_chip *chip = to_tpm_chip(dev);
> +	ssize_t rc = 0;
>   	cap_t cap;
> -	ssize_t rc;
>
> -	rc = tpm1_getcap(to_tpm_chip(dev), TPM_CAP_FLAG_VOL, &cap,
> -			 "attempting to determine the temporary state",
> -			 sizeof(cap.stclear_flags));
> -	if (rc)
> +	if (tpm_try_get_ops(chip))
>   		return 0;
>
> +	if (tpm1_getcap(to_tpm_chip(dev), TPM_CAP_FLAG_VOL, &cap,
> +			"attempting to determine the temporary state",
> +			sizeof(cap.stclear_flags)))
> +		goto out_ops;
> +
>   	rc = sprintf(buf, "%d\n", cap.stclear_flags.deactivated);
> +out_ops:
> +	tpm_put_ops(chip);
>   	return rc;
>   }
>   static DEVICE_ATTR_RO(temp_deactivated);
> @@ -195,15 +222,18 @@ static ssize_t caps_show(struct device *dev, struct device_attribute *attr,
>   			 char *buf)
>   {
>   	struct tpm_chip *chip = to_tpm_chip(dev);
> -	cap_t cap;
> -	ssize_t rc;
> +	ssize_t rc = 0;
>   	char *str = buf;
> +	cap_t cap;
>
> -	rc = tpm1_getcap(chip, TPM_CAP_PROP_MANUFACTURER, &cap,
> -			 "attempting to determine the manufacturer",
> -			 sizeof(cap.manufacturer_id));
> -	if (rc)
> +	if (tpm_try_get_ops(chip))
>   		return 0;
> +
> +	if (tpm1_getcap(chip, TPM_CAP_PROP_MANUFACTURER, &cap,
> +			"attempting to determine the manufacturer",
> +			sizeof(cap.manufacturer_id)))
> +		goto out_ops;
> +
>   	str += sprintf(str, "Manufacturer: 0x%x\n",
>   		       be32_to_cpu(cap.manufacturer_id));
>
> @@ -220,11 +250,10 @@ static ssize_t caps_show(struct device *dev, struct device_attribute *attr,
>   			       cap.tpm_version_1_2.revMinor);
>   	} else {
>   		/* Otherwise just use TPM_STRUCT_VER */
> -		rc = tpm1_getcap(chip, TPM_CAP_VERSION_1_1, &cap,
> -				 "attempting to determine the 1.1 version",
> -				 sizeof(cap.tpm_version));
> -		if (rc)
> -			return 0;
> +		if (tpm1_getcap(chip, TPM_CAP_VERSION_1_1, &cap,
> +				"attempting to determine the 1.1 version",
> +				sizeof(cap.tpm_version)))
> +			goto out_ops;
>   		str += sprintf(str,
>   			       "TCG version: %d.%d\nFirmware version: %d.%d\n",
>   			       cap.tpm_version.Major,
> @@ -232,8 +261,10 @@ static ssize_t caps_show(struct device *dev, struct device_attribute *attr,
>   			       cap.tpm_version.revMajor,
>   			       cap.tpm_version.revMinor);
>   	}
> -
> -	return str - buf;
> +	rc = str - buf;
> +out_ops:
> +	tpm_put_ops(chip);
> +	return rc;
>   }
>   static DEVICE_ATTR_RO(caps);
>
> @@ -241,10 +272,12 @@ static ssize_t cancel_store(struct device *dev, struct device_attribute *attr,
>   			    const char *buf, size_t count)
>   {
>   	struct tpm_chip *chip = to_tpm_chip(dev);
> -	if (chip == NULL)
> +
> +	if (tpm_try_get_ops(chip))
>   		return 0;
>
>   	chip->ops->cancel(chip);
> +	tpm_put_ops(chip);
>   	return count;
>   }
>   static DEVICE_ATTR_WO(cancel);



  reply	other threads:[~2018-11-08 15:26 UTC|newest]

Thread overview: 38+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-11-08 14:15 [PATCH v5 00/17] Remove nested TPM operations Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 01/17] tpm: use tpm_buf in tpm_transmit_cmd() as the IO parameter Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 02/17] tpm: fix invalid return value in pubek_show() Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 03/17] tpm: return 0 from pcrs_show() when tpm1_pcr_read() fails Jarkko Sakkinen
2018-11-08 14:52   ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 04/17] tpm: call tpm2_flush_space() on error in tpm_try_transmit() Jarkko Sakkinen
2018-11-08 14:55   ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 05/17] tpm: print tpm2_commit_space() error inside tpm2_commit_space() Jarkko Sakkinen
2018-11-08 14:56   ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 06/17] tpm: clean up tpm_try_transmit() error handling flow Jarkko Sakkinen
2018-11-08 14:59   ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 07/17] tpm: declare struct tpm_header Jarkko Sakkinen
2018-11-08 15:02   ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 08/17] tpm: access command header through struct in tpm_try_transmit() Jarkko Sakkinen
2018-11-08 15:03   ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 09/17] tpm: move tpm_validate_commmand() to tpm2-space.c Jarkko Sakkinen
2018-11-08 17:03   ` Winkler, Tomas
2018-11-08 23:07     ` Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 10/17] tpm: encapsulate tpm_dev_transmit() Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 11/17] tpm: move TPM space code out of tpm_transmit() Jarkko Sakkinen
2018-11-08 15:16   ` Stefan Berger
2018-11-08 18:58     ` Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 12/17] tpm: remove @space from tpm_transmit() Jarkko Sakkinen
2018-11-08 15:18   ` Stefan Berger
2018-11-08 14:15 ` [PATCH v5 13/17] tpm: use tpm_try_get_ops() in tpm-sysfs.c Jarkko Sakkinen
2018-11-08 15:26   ` Stefan Berger [this message]
2018-11-08 14:15 ` [PATCH v5 14/17] tpm: remove TPM_TRANSMIT_UNLOCKED flag Jarkko Sakkinen
2018-11-08 15:43   ` Stefan Berger
2018-11-08 19:02     ` Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 15/17] tpm: introduce tpm_chip_start() and tpm_chip_stop() Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 16/17] tpm: take TPM chip power gating out of tpm_transmit() Jarkko Sakkinen
2018-11-08 18:38   ` Winkler, Tomas
2018-11-08 23:07     ` Jarkko Sakkinen
2018-11-09 21:37       ` Winkler, Tomas
2018-11-13 11:12         ` Jarkko Sakkinen
2018-11-13 11:58           ` Winkler, Tomas
2018-11-13 15:52             ` Jarkko Sakkinen
2018-11-08 14:15 ` [PATCH v5 17/17] tpm: remove @flags from tpm_transmit() Jarkko Sakkinen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cece04be-14f0-bbb4-db74-5e286f7b2b48@linux.ibm.com \
    --to=stefanb@linux.ibm.com \
    --cc=James.Bottomley@HansenPartnership.com \
    --cc=arnd@arndb.de \
    --cc=gregkh@linuxfoundation.org \
    --cc=jarkko.sakkinen@linux.intel.com \
    --cc=jgg@ziepe.ca \
    --cc=linux-integrity@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=nayna@linux.ibm.com \
    --cc=peterhuewe@gmx.de \
    --cc=stefanb@linux.vnet.ibm.com \
    --cc=tadeusz.struk@intel.com \
    --cc=tomas.winkler@intel.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).