Proxmox-Port/libtpms
1
0
Fork 0
mirror of https://github.com/stefanberger/libtpms synced 2026-08-17 20:15:46 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

tpm2: Check size of TPM2B_NAME buffer before reading 2 bytes from it

Browse Source 
Fix the missing buffer size check that the TPM 2 errata v1.4 mentions in
2.6.2 by adding a buffer size check before reading 2 bytes from a
TPM2B_NAME buffer. There's no known CVE for this.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
This commit is contained in:
Stefan Berger 2023-02-28 16:21:19 -05:00 committed by Stefan Berger
parent 324dbb4c27
commit 92f470c1b0
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/tpm2/EACommands.c
View File

@ -892,6 +892,8 @@ TPM2_PolicyAuthorize(
// Get pointer to the session structure
session = SessionGet(in->policySession);
// Extract from the Name of the key, the algorithm used to compute it's Name
if (in->keySign.t.size < 2) // libtpms added: TPM 2 Errata v1.4
return TPM_RC_INSUFFICIENT; // libtpms added
hashAlg = BYTE_ARRAY_TO_UINT16(in->keySign.t.name);
// 'keySign' parameter needs to use a supported hash algorithm, otherwise
// can't tell how large the digest should be