mirror of
https://github.com/stefanberger/swtpm.git
synced 2026-02-05 14:12:54 +00:00
Libtpms-based TPM emulator with socket, character device, and Linux CUSE interface.
This fix addresses Coverity issue CID 370783. Check for an unreasonable number of PCR banks returned from command sent to swtpm. Limit the number of PCR banks that can be returned to '20', which is more than enough. Previously we may not have sanitized the variable correctly but safeguards were in place: Even if the 16 bit variable count was the maximum possible (0xffff) we should be able to allocate the all_pcr_banks array of string pointers. Safeguards to not overstep the parsed array are in place in the loop that's entered afterwards where the count variable serves as a limit for the loop. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> |
||
|---|---|---|
| .github/ISSUE_TEMPLATE | ||
| debian | ||
| include | ||
| man | ||
| samples | ||
| src | ||
| tests | ||
| .gitignore | ||
| .travis.yml | ||
| autogen.sh | ||
| CHANGES | ||
| configure.ac | ||
| COPYING | ||
| DCO1.1.txt | ||
| INSTALL | ||
| LICENSE | ||
| Makefile.am | ||
| README | ||
| run_tests | ||
| swtpm.spec | ||
| swtpm.spec.in | ||
| TODO | ||
SWTPM - Software TPM Emulator
David Safford safford@us.ibm.com
Stefan Berger stefanb@us.ibm.com
The SWTPM package provides TPM emulators with different front-end interfaces
to libtpms. TPM emulators provide socket interfaces (TCP/IP and Unix) and
the Linux CUSE interface for the creation of multiple native /dev/vtpm* devices.
The SWTPM package also provides several tools for using the TPM emulator,
creating certificates for a TPM, and simulating the manufacturing of
a TPM by creating a TPM's EK and platform certificates etc. Please read
the READMEs in the individual tool's directory under src/.
Please consult the Wiki for information about swtpm:
https://github.com/stefanberger/swtpm/wiki