From: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Cc: U-Boot Mailing List <u-boot@lists.denx.de>
Subject: Re: [PATCH 4/8] tpm: Correct the define-space command in TPMv2
Date: Tue, 7 Jun 2022 11:46:27 +0300 [thread overview]
Message-ID: <Yp8QYxtcd4U2pfpr@hera> (raw)
In-Reply-To: <20220301001125.1554442-5-sjg@chromium.org>
Hi Simon,
Thanks for fixing this.
On Mon, Feb 28, 2022 at 05:11:21PM -0700, Simon Glass wrote:
> The message format is incorrect. Fix it.
>
> Signed-off-by: Simon Glass <sjg@chromium.org>
> ---
>
> lib/tpm-v2.c | 18 +++++++++++-------
> 1 file changed, 11 insertions(+), 7 deletions(-)
>
> diff --git a/lib/tpm-v2.c b/lib/tpm-v2.c
> index 6058f2e1e4..fe99b9c863 100644
> --- a/lib/tpm-v2.c
> +++ b/lib/tpm-v2.c
> @@ -89,14 +89,14 @@ u32 tpm2_nv_define_space(struct udevice *dev, u32 space_index,
> * Calculate the offset of the nv_policy piece by adding each of the
> * chunks below.
> */
> - uint offset = 10 + 8 + 13 + 14;
> + uint offset = 10 + 4 + 13 + 14;
> u8 command_v2[COMMAND_BUFFER_SIZE] = {
> /* header 10 bytes */
> tpm_u16(TPM2_ST_SESSIONS), /* TAG */
> - tpm_u32(offset + nv_policy_size),/* Length */
> + tpm_u32(offset + nv_policy_size + 2),/* Length */
> tpm_u32(TPM2_CC_NV_DEFINE_SPACE),/* Command code */
>
> - /* handles 8 bytes */
> + /* handles 4 bytes */
> tpm_u32(TPM2_RH_PLATFORM), /* Primary platform seed */
Similar to my comment on the previous patches, please send a version with
defines that gets rid of the magic numbers (offset, +2 on nv_policy_size etc)
>
> /* session header 13 bytes */
> @@ -107,12 +107,15 @@ u32 tpm2_nv_define_space(struct udevice *dev, u32 space_index,
> tpm_u16(0), /* auth_size */
>
> /* message 14 bytes + policy */
> - tpm_u16(12 + nv_policy_size), /* size */
> + tpm_u16(12 + nv_policy_size + 2), /* size */
> tpm_u32(space_index),
> tpm_u16(TPM2_ALG_SHA256),
> tpm_u32(nv_attributes),
> tpm_u16(nv_policy_size),
> - /* nv_policy */
> + /*
> + * nv_policy
> + * space_size
> + */
> };
> int ret;
>
> @@ -120,8 +123,9 @@ u32 tpm2_nv_define_space(struct udevice *dev, u32 space_index,
> * Fill the command structure starting from the first buffer:
> * - the password (if any)
> */
> - ret = pack_byte_string(command_v2, sizeof(command_v2), "s",
> - offset, nv_policy, nv_policy_size);
> + ret = pack_byte_string(command_v2, sizeof(command_v2), "sw",
> + offset, nv_policy, nv_policy_size,
> + offset + nv_policy_size, space_size);
> if (ret)
> return TPM_LIB_ERROR;
>
> --
> 2.35.1.574.g5d30c73bfb-goog
>
Cheers
/Ilias
next prev parent reply other threads:[~2022-06-07 8:46 UTC|newest]
Thread overview: 19+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-03-01 0:11 [PATCH 0/8] tpm: Various minor fixes and enhancements Simon Glass
2022-03-01 0:11 ` [PATCH 1/8] tpm: Export the TPM-version functions Simon Glass
2022-06-07 8:28 ` Ilias Apalodimas
2022-03-01 0:11 ` [PATCH 2/8] tpm: Require a digest source when extending the PCR Simon Glass
2022-06-07 8:42 ` Ilias Apalodimas
2022-08-14 23:29 ` Simon Glass
2022-03-01 0:11 ` [PATCH 3/8] tpm: Correct the permissions command in TPMv1 Simon Glass
2022-06-07 8:44 ` Ilias Apalodimas
2022-08-14 23:29 ` Simon Glass
2022-03-01 0:11 ` [PATCH 4/8] tpm: Correct the define-space command in TPMv2 Simon Glass
2022-06-07 8:46 ` Ilias Apalodimas [this message]
2022-08-14 23:29 ` Simon Glass
2022-03-01 0:11 ` [PATCH 5/8] tpm: sandbox: Allow init of TPM in a different phase Simon Glass
2022-06-07 8:48 ` Ilias Apalodimas
2022-03-01 0:11 ` [PATCH 6/8] tpm: Allow reporting the internal state Simon Glass
2022-03-01 0:11 ` [PATCH 7/8] tpm: Implement state command for Cr50 Simon Glass
2022-06-07 8:54 ` Ilias Apalodimas
2022-08-14 23:29 ` Simon Glass
2022-03-01 0:11 ` [PATCH 8/8] tpm: Allow commiting non-volatile data Simon Glass
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Yp8QYxtcd4U2pfpr@hera \
--to=ilias.apalodimas@linaro.org \
--cc=u-boot@lists.denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).