From fdd6b34a79e90724fd9a158933f94d0dc263f2fe Mon Sep 17 00:00:00 2001 From: Stefan Berger Date: Thu, 7 Aug 2025 17:42:46 -0400 Subject: [PATCH] Sync: Add more buffer size checks to CryptParameterDecryption Signed-off-by: Stefan Berger --- src/tpm2/CryptUtil.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/tpm2/CryptUtil.c b/src/tpm2/CryptUtil.c index aea0076e..a88e9882 100644 --- a/src/tpm2/CryptUtil.c +++ b/src/tpm2/CryptUtil.c @@ -68,6 +68,8 @@ #include "Tpm.h" #include "Marshal.h" +#include "tpm_library_intern.h" // libtpms added + //****************************************************************************/ //** Hash/HMAC Functions //****************************************************************************/ @@ -1052,7 +1054,8 @@ CryptParameterDecryption( return TPM_RC_INSUFFICIENT; } - if(cipherSize > bufferSize) + if(cipherSize > MAX_COMMAND_SIZE || bufferSize <= 0 + || (UINT32)cipherSize > (UINT32)bufferSize) { return TPM_RC_SIZE; }