Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package tpm2.0-tools for openSUSE:Factory 
checked in at 2021-06-18 10:13:56
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/tpm2.0-tools (Old)
 and      /work/SRC/openSUSE:Factory/.tpm2.0-tools.new.2625 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "tpm2.0-tools"

Fri Jun 18 10:13:56 2021 rev:27 rq:900549 version:5.1

Changes:
--------
--- /work/SRC/openSUSE:Factory/tpm2.0-tools/tpm2.0-tools.changes        
2021-06-15 16:38:47.953845431 +0200
+++ /work/SRC/openSUSE:Factory/.tpm2.0-tools.new.2625/tpm2.0-tools.changes      
2021-06-18 10:14:10.930025644 +0200
@@ -1,0 +2,7 @@
+Thu Jun 17 09:26:42 UTC 2021 - Alberto Planas Dominguez <apla...@suse.com>
+
+- Add 0001-tpm2_checkquote-fix-uninitialized-variable.patch for a better
+  fix of boo#1187316
+- Re-enable lto
+
+-------------------------------------------------------------------

New:
----
  0001-tpm2_checkquote-fix-uninitialized-variable.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ tpm2.0-tools.spec ++++++
--- /var/tmp/diff_new_pack.MAQlkC/_old  2021-06-18 10:14:11.310026146 +0200
+++ /var/tmp/diff_new_pack.MAQlkC/_new  2021-06-18 10:14:11.314026152 +0200
@@ -16,7 +16,6 @@
 #
 
 
-%define _lto_cflags %{nil}
 Name:           tpm2.0-tools
 Version:        5.1
 Release:        0
@@ -27,6 +26,7 @@
 Source0:        
https://github.com/tpm2-software/tpm2-tools/releases/download/%{version}/tpm2-tools-%{version}.tar.gz
 Patch0:         fix_bogus_warning.patch
 Patch1:         0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch
+Patch2:         0001-tpm2_checkquote-fix-uninitialized-variable.patch
 BuildRequires:  autoconf-archive
 BuildRequires:  automake
 BuildRequires:  gcc-c++
@@ -69,6 +69,7 @@
 %setup -q -n tpm2-tools-%{version}
 %patch0 -p1
 %patch1 -p1
+%patch2 -p1
 
 %build
 # TODO: remove autoreconf once fix_pie_linking patch is no longer needed

++++++ 0001-tpm2_checkquote-fix-uninitialized-variable.patch ++++++
>From 3d7edb1c70cba6c34c71c9b856c07b8adcebb15c Mon Sep 17 00:00:00 2001
From: Alberto Planas <apla...@suse.com>
Date: Thu, 17 Jun 2021 11:07:25 +0200
Subject: [PATCH] tpm2_checkquote: fix uninitialized variable

The variable `temp_pcrs` is uninitialized, and later partially
uninitialized when reading the selection data from file.

When activating lto optimizations, this bug presents itself showing an
error during the read of the quote:

ERROR: Malformed PCR file, pcr count cannot be greater than 32, got: ...

Fixes: #2767

Co-authored-by: Martin Liska <marxin.li...@gmail.com>
Signed-off-by: Alberto Planas <apla...@suse.com>
---
 tools/misc/tpm2_checkquote.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/misc/tpm2_checkquote.c b/tools/misc/tpm2_checkquote.c
index 53150857..8d780f11 100644
--- a/tools/misc/tpm2_checkquote.c
+++ b/tools/misc/tpm2_checkquote.c
@@ -376,7 +376,7 @@ static tool_rc init(void) {
     TPM2B_ATTEST *msg = NULL;
     TPML_PCR_SELECTION pcr_select;
     tpm2_pcrs *pcrs;
-    tpm2_pcrs temp_pcrs;
+    tpm2_pcrs temp_pcrs = {};
     tool_rc return_value = tool_rc_general_error;
 
     msg = message_from_file(ctx.msg_file_path);
-- 
2.32.0

Reply via email to