libtpms/src
Stefan Berger 9d6d76cc68 tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018)
Check that there are sufficient bytes in the buffer before reading the
cipherSize from it. Also, reduce the bufferSize variable by the number
of bytes that make up the cipherSize to avoid reading and writing bytes
beyond the buffer in subsequent steps that do in-place decryption.

This fixes CVE-2023-1017 & CVE-2023-1018.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2025-05-20 09:42:52 -04:00
..
tpm2 tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018) 2025-05-20 09:42:52 -04:00
tpm12 tpm12: Replace include of engine.h with err.h 2024-07-09 10:29:23 -04:00
compiler.h library: use __attribute__((format,...) to check printf format and args 2018-06-15 18:07:49 -04:00
libtpms.syms Integrate the TPM 2 into the library; do not compile with TPM 2 yet 2018-06-15 18:07:47 -04:00
Makefile.am tpm2: Add utilities for debugging of constant time issues 2020-10-30 11:27:32 -04:00
test.syms build-sys: work around broken linker when testing --version-script support 2018-08-30 21:45:16 +00:00
tpm_library_conf.h Initial import of project 2013-10-31 15:33:22 -05:00
tpm_library_intern.h tpm2: Log command that put TPM 2 into failure mode 2018-12-10 09:17:25 -05:00
tpm_library.c tpm2: Log command that put TPM 2 into failure mode 2018-12-10 09:17:25 -05:00
tpm_tpm2_interface.c tpm2: Fix the returned number in the JSON 2025-05-15 10:51:01 -04:00
tpm_tpm2_tis.c tpm2: Introduce TPM_HAVE_TPM2_DECLARATIONS to avoid re-declarations 2018-10-05 21:47:15 -04:00
tpm_tpm12_interface.c tpm2: Introduce TPM_HAVE_TPM2_DECLARATIONS to avoid re-declarations 2018-10-05 21:47:15 -04:00
tpm_tpm12_tis.c Introduce internal interface to reach TPM functionality 2015-12-08 09:07:54 -05:00