From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alexander Steffen Subject: [PATCH RESEND 0/2] Avoid sending invalid data to the TPM Date: Thu, 24 Aug 2017 10:35:43 +0200 Message-ID: <20170824083545.13280-1-Alexander.Steffen@infineon.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: tpmdd-devel-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org To: jarkko.sakkinen-VuQAYsv1563Yd54FQh9/CA@public.gmane.org, tpmdd-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org List-Id: tpmdd-devel@lists.sourceforge.net When trying to send invalid commands (with mismatching commandSize values) to the TPM we discovered some cases in which data is sent to the TPM that should not be sent there. Similar problems were fixed years ago, but this one slipped through it seems. Alexander Steffen (2): tpm-dev-common: Reject too short writes tpm-interface: Fix checks of buffer size drivers/char/tpm/tpm-dev-common.c | 2 +- drivers/char/tpm/tpm-interface.c | 16 ++++++++-------- drivers/char/tpm/tpm.h | 3 ++- 3 files changed, 11 insertions(+), 10 deletions(-) -- 2.7.4 ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot