Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tpm2.0-tools for openSUSE:Factory checked in at 2021-06-18 10:13:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tpm2.0-tools (Old) and /work/SRC/openSUSE:Factory/.tpm2.0-tools.new.2625 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tpm2.0-tools" Fri Jun 18 10:13:56 2021 rev:27 rq:900549 version:5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/tpm2.0-tools/tpm2.0-tools.changes 2021-06-15 16:38:47.953845431 +0200 +++ /work/SRC/openSUSE:Factory/.tpm2.0-tools.new.2625/tpm2.0-tools.changes 2021-06-18 10:14:10.930025644 +0200 @@ -1,0 +2,7 @@ +Thu Jun 17 09:26:42 UTC 2021 - Alberto Planas Dominguez <apla...@suse.com> + +- Add 0001-tpm2_checkquote-fix-uninitialized-variable.patch for a better + fix of boo#1187316 +- Re-enable lto + +------------------------------------------------------------------- New: ---- 0001-tpm2_checkquote-fix-uninitialized-variable.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tpm2.0-tools.spec ++++++ --- /var/tmp/diff_new_pack.MAQlkC/_old 2021-06-18 10:14:11.310026146 +0200 +++ /var/tmp/diff_new_pack.MAQlkC/_new 2021-06-18 10:14:11.314026152 +0200 @@ -16,7 +16,6 @@ # -%define _lto_cflags %{nil} Name: tpm2.0-tools Version: 5.1 Release: 0 @@ -27,6 +26,7 @@ Source0: https://github.com/tpm2-software/tpm2-tools/releases/download/%{version}/tpm2-tools-%{version}.tar.gz Patch0: fix_bogus_warning.patch Patch1: 0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch +Patch2: 0001-tpm2_checkquote-fix-uninitialized-variable.patch BuildRequires: autoconf-archive BuildRequires: automake BuildRequires: gcc-c++ @@ -69,6 +69,7 @@ %setup -q -n tpm2-tools-%{version} %patch0 -p1 %patch1 -p1 +%patch2 -p1 %build # TODO: remove autoreconf once fix_pie_linking patch is no longer needed ++++++ 0001-tpm2_checkquote-fix-uninitialized-variable.patch ++++++ >From 3d7edb1c70cba6c34c71c9b856c07b8adcebb15c Mon Sep 17 00:00:00 2001 From: Alberto Planas <apla...@suse.com> Date: Thu, 17 Jun 2021 11:07:25 +0200 Subject: [PATCH] tpm2_checkquote: fix uninitialized variable The variable `temp_pcrs` is uninitialized, and later partially uninitialized when reading the selection data from file. When activating lto optimizations, this bug presents itself showing an error during the read of the quote: ERROR: Malformed PCR file, pcr count cannot be greater than 32, got: ... Fixes: #2767 Co-authored-by: Martin Liska <marxin.li...@gmail.com> Signed-off-by: Alberto Planas <apla...@suse.com> --- tools/misc/tpm2_checkquote.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/misc/tpm2_checkquote.c b/tools/misc/tpm2_checkquote.c index 53150857..8d780f11 100644 --- a/tools/misc/tpm2_checkquote.c +++ b/tools/misc/tpm2_checkquote.c @@ -376,7 +376,7 @@ static tool_rc init(void) { TPM2B_ATTEST *msg = NULL; TPML_PCR_SELECTION pcr_select; tpm2_pcrs *pcrs; - tpm2_pcrs temp_pcrs; + tpm2_pcrs temp_pcrs = {}; tool_rc return_value = tool_rc_general_error; msg = message_from_file(ctx.msg_file_path); -- 2.32.0