mirror of
https://github.com/stefanberger/libtpms
synced 2026-08-09 17:11:15 +00:00
Check that there are sufficient bytes in the buffer before reading the cipherSize from it. Also, reduce the bufferSize variable by the number of bytes that make up the cipherSize to avoid reading and writing bytes beyond the buffer in subsequent steps that do in-place decryption. This fixes CVE-2023-1017 & CVE-2023-1018. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> |
||
|---|---|---|
| .. | ||
| tpm2 | ||
| tpm12 | ||
| compiler.h | ||
| libtpms.syms | ||
| Makefile.am | ||
| test.syms | ||
| tpm_library_conf.h | ||
| tpm_library_intern.h | ||
| tpm_library.c | ||
| tpm_tpm2_interface.c | ||
| tpm_tpm2_tis.c | ||
| tpm_tpm12_interface.c | ||
| tpm_tpm12_tis.c | ||