libtpms/src
Stefan Berger 6a6d40d8e2 tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018)
Check that there are sufficient bytes in the buffer before reading the
cipherSize from it. Also, reduce the bufferSize variable by the number
of bytes that make up the cipherSize to avoid reading and writing bytes
beyond the buffer in subsequent steps that do in-place decryption.

This fixes CVE-2023-1017 & CVE-2023-1018.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2023-02-28 15:57:55 -05:00
..
tpm2 tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018) 2023-02-28 15:57:55 -05:00
tpm12 tpm12: Initialize variables due to gcc complaint (s390x, false positive) 2022-04-04 16:49:38 -04:00
compiler.h library: use __attribute__((format,...) to check printf format and args 2018-06-15 18:07:49 -04:00
disabled_interface.c build-sys: add optional --with-tpm1 2021-08-06 08:04:37 -04:00
libtpms.syms Integrate the TPM 2 into the library; do not compile with TPM 2 yet 2018-06-15 18:07:47 -04:00
Makefile.am build-sys: Use -DOPENSSL_SUPPRESS_DEPRECATED to suppress warning (OSSL 3) 2021-09-21 16:52:22 -04:00
test.syms build-sys: work around broken linker when testing --version-script support 2018-08-30 21:45:16 +00:00
tpm_debug.c Move common debug, memory & nvfile units to src/ 2021-08-06 08:04:37 -04:00
tpm_debug.h tpm: #undef printf in case it is #define'd (OSS-Fuzz) 2022-04-21 09:50:50 -04:00
tpm_library_conf.h Fix many misspellings 2021-03-02 08:20:25 -05:00
tpm_library_intern.h build-sys: add optional --with-tpm1 2021-08-06 08:04:37 -04:00
tpm_library.c build-sys: add optional --with-tpm1 2021-08-06 08:04:37 -04:00
tpm_memory.c Move common debug, memory & nvfile units to src/ 2021-08-06 08:04:37 -04:00
tpm_nvfile.c Move common debug, memory & nvfile units to src/ 2021-08-06 08:04:37 -04:00
tpm_nvfile.h Move common debug, memory & nvfile units to src/ 2021-08-06 08:04:37 -04:00
tpm_tpm2_interface.c tpm2: Report supported Camellia keysizes in the JSON 2021-09-06 13:42:06 -04:00
tpm_tpm2_tis.c tpm2: rev155: Major refactoring of header files 2020-04-14 16:03:45 -04:00
tpm_tpm12_interface.c Move common debug, memory & nvfile units to src/ 2021-08-06 08:04:37 -04:00
tpm_tpm12_tis.c Move common debug, memory & nvfile units to src/ 2021-08-06 08:04:37 -04:00