From: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
To: Jason Gunthorpe <jgunthorpe@obsidianresearch.com>
Cc: tpmdd-devel@lists.sourceforge.net,
linux-security-module@vger.kernel.org,
Peter Huewe <peterhuewe@gmx.de>,
Marcel Selhorst <tpmdd@selhorst.net>,
open list <linux-kernel@vger.kernel.org>
Subject: Re: [PATCH RFC] tpm: migrate pubek_show to struct tpm_buf
Date: Thu, 25 May 2017 15:28:01 -0700 [thread overview]
Message-ID: <20170525222801.mayost6gxcggurjo@intel.com> (raw)
In-Reply-To: <20170525211613.GA14802@obsidianresearch.com>
On Thu, May 25, 2017 at 03:16:13PM -0600, Jason Gunthorpe wrote:
> On Thu, May 25, 2017 at 02:11:04PM -0700, Jarkko Sakkinen wrote:
> > struct tpm_chip *chip = to_tpm_chip(dev);
> > + char anti_replay[20];
> >
> > - tpm_cmd.header.in = tpm_readpubek_header;
> > - err = tpm_transmit_cmd(chip, NULL, &tpm_cmd, READ_PUBEK_RESULT_SIZE,
> > + rc = tpm_buf_init(&tpm_buf, TPM_TAG_RQU_COMMAND, TPM_ORD_READPUBEK);
> > + if (rc)
> > + return rc;
> > +
> > + /* The checksum is ignored so it doesn't matter what the contents are.
> > + */
> > + tpm_buf_append(&tpm_buf, anti_replay, sizeof(anti_replay));
>
> It does matter, we do not want to leak random kernel memory incase it
> has something sensitive. Zero anti_replay.
If there was a leak it has existed before this change as tpm_cmd was
also allocated from stack. And there is not leak because the checksum is
not printed.
> > +
> > - /*
> > - ignore header 10 bytes
> > - algorithm 32 bits (1 == RSA )
> > - encscheme 16 bits
> > - sigscheme 16 bits
> > - parameters (RSA 12->bytes: keybit, #primes, expbit)
> > - keylenbytes 32 bits
> > - 256 byte modulus
> > - ignore checksum 20 bytes
> > - */
>
> Not sure we should delete the comment, tpm buf does not make the parse
> any clearer.
I think better idea would be to move struct tpm_readpubek_params_out
declaration here and use it to refer different fields. Previously this
has been a complete mess. The structure has been declared but it has not
been used for anything. I wonder what is the history here...
/Jarkko
next prev parent reply other threads:[~2017-05-25 22:28 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-05-25 21:11 [PATCH RFC] tpm: migrate pubek_show to struct tpm_buf Jarkko Sakkinen
2017-05-25 21:16 ` Jason Gunthorpe
2017-05-25 22:28 ` Jarkko Sakkinen [this message]
[not found] ` <20170525222801.mayost6gxcggurjo-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
2017-05-25 22:40 ` Jason Gunthorpe
2017-05-30 4:52 ` Jarkko Sakkinen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20170525222801.mayost6gxcggurjo@intel.com \
--to=jarkko.sakkinen@linux.intel.com \
--cc=jgunthorpe@obsidianresearch.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=peterhuewe@gmx.de \
--cc=tpmdd-devel@lists.sourceforge.net \
--cc=tpmdd@selhorst.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).