Commit Graph

1415 Commits

Author SHA1 Message Date
Stefan Berger
e56da27cba Sync: Sync minor changes in several files with upstream
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
ec610a6beb tpm2: Split off TDES related parts from TpmToOsslSym.h and adjust licenses
Sync the whitespace differences in TpmToOsslSym.h with upstream.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
947846cdf7 Sync: Add include to simulator_sysheaders.h
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
96424c2e4c Sync: Fix and extend compile-time testing of NUM_AUTHVALUE_PCR_GROUP
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
8b437483c8 Sync: Fix masking-out of unneeded bits in TpmMath_GetRandomBits
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
1425c9133d tpm2: Adopt the directory structure of upstream code repo
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
6d04f7c7ba Sync: Implement platform function to determine enabled self tests
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
ea44b01eb4 Sync: Introduce platform functions for accessing NV indices
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
0ba905f226 Sync: Replace a printf with DEBUG_PRINT in BnToOsslMath.c
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
5782eca3bb Sync: Add another fallthrough hint for static analysis tools
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
bad09ff655 Sync: Fix comments
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
b12b69553a Sync: Only build x509 related functions if CC_CertifyX509 is '1'
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
fdd6b34a79 Sync: Add more buffer size checks to CryptParameterDecryption
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
de08e7e954 Sync: Add NOT_REFERENCED to avoid build error
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
46e299f905 Sync: Throw a build error if CC_AC_GetCapability is enabled
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
ce6e87c921 Sync: Reformat comments in Global.h
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
89ba040bb3 Sync: Format TpmProfile_CommandList.h
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
ec17b40d22 Sync: Report versioning information using a structe passed to a function
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
32941241dc Sync: Check for NULL pointers in CommandDispatcher
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
a90b87fda2 Sync: Add checks for locator == (NV_REF)0
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
d7adadf113 Sync: Fix code comments and function descriptions and trivial changes
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
915f51db3f Sync: Rework failure handling and replace g_inFailureMode
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
12a50d4362 Sync: Adjust pAssert variant being used depending on function return type
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
2319ccd86e Sync: Have PolicyContextUpdate return TPM_RC
Split-out those TPM 2 command functions that need to be adapted due to the
functions they call returning an error code. Split them out into their own
files so they can be synchronized easier.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
3b0e5c0a91 Sync: Have Object and PCR related functions return TPM_RC
Split-out those TPM 2 command functions that need to be adapted due to the
functions they call returning an error code. Split them out into their own
files so they can be synchronized easier.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
baaa0b8597 Sync: Have ComputeCommandHMAC return TPM_RC
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
9ef5b3ac78 Sync: Rework some NVRAM functions to return TPM_RC and adjust pAsserts
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
f9e4b13802 Sync: Add pAsserts after many HandleToObject calls
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
96448cf3b2 Sync: Put pAssert after every SessionGet
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
e254351c45 Sync: Have several crypto functions return TPM_RC now
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
329363b129 Sync: Have _TPM_Hash_Start/Data/End and FlushObject return error codes
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
c4a6a45bea Sync: Implemented debugging macros and enable with build switch
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
b6eeb14a78 Sync: Improve platform initialization
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
59f99e5b62 Sync: Add options for simulator (unused)
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
3b05dc3f12 Sync: Move vendor commands support into own directory
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
6209db9287 tpm2: Include stdint.h/def.h in BaseTypes.h and some other changes
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
c5755244bc Sync: Fix some build issues, reformat code and add more comments
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
0bf841acf9 Sync: Use clang-format 19.1.4 to reformat sources
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
f7dbbb78f1 Sync: Reformat some files
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
2985cad56c Sync: Introduce PolicyTransportSPDM command but do not activate it
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
499e12b398 Sync: Introduce ReadOnlyControl command but do not activate it
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
d628dee516 Sync: Sync on white space changes
Resolve only white space changes on a previously applied patch resolving a
CVE where my version looked slightly different.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
617bef1524 Sync: Remove TABLE_DRIVEN_DISPATCH build switch
Remove the TABLE_DRIVEN_DISPATCH build switch that was set to 'YES'.
Remove code that assumed it to be set to 'NO'.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
f935443e18 tpm2: Get rid of IS_IMPLEMENTED flag for CC attributes
Upstream has gotten rid of the IS_IMPLEMENTED flag but upstream is also
using compressed lists where each element in the command lists represents
an implemented command. Libtpms does not use compressed lists but we may
have a list with gaps in it due to unimplemented commands where this flag
may be the only one set and help identify an implemented command. However,
since profiles indicate enablement and implementation of commands, and
nearly all tests for the IS_IMPLEMENTED flag are paired with a check on
the profile with RuntimeCommandsCheckEnabled(), we can get rid of tests for
IS_IMPLEMENTED and finally the flag altogether since it is redundant.

Also get rid of NOT_IMPLEMENTED flag that was not used anywhere.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
58b8c739c2 Sync: Remove USE_MARSHALING_DEFINES build switch
The build swtich was not used anywhere else.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
b34419934c Sync: Remove USE_BIT_FIELD_STRUCTURES build switch and bit fields
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
5105be38a5 LICENSE: Add copyright notices and BSD license for newer TPM 2 code
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
7de7d53b70 scripts: Add help screen to meld-all and display if file is 'not upstream'
Add a help screen to meld-all and display if a file is not found in the
upstream repo.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
102073b04c scripts: Implement meld-commit to meld by commit Id
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-13 09:59:26 -05:00
Stefan Berger
c12e737cce tpm2: Check for NULL pointer before dereferencing it (-fanalyzer)
Check that the object returned from HandleToObject is not NULL before
dereferencing it. In practice, this cannot currently happen in the call
paths that GetHierachy() is called because the object described by the
handle is known to exist.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2026-02-11 14:04:06 -05:00