tpm2: Fix size check in CryptSecretDecrypt

Check the secret size against the size of the buffer, not the size
member that has not been set yet.

Reported by Coverity.

Signed-off-by: Ross Lagerwall <ross.lagerwall@citrix.com>
This commit is contained in:
Ross Lagerwall 2022-05-23 14:16:57 +01:00 committed by Stefan Berger
parent 6728aada47
commit 78a27cf0c3

View File

@ -732,7 +732,7 @@ CryptSecretDecrypt(
nonceCaller->t.size);
}
// make sure secret will fit
if(secret->t.size > data->t.size)
if(secret->t.size > sizeof(data->t.buffer))
return TPM_RC_FAILURE;
data->t.size = secret->t.size;
// CFB decrypt, using nonceCaller as iv