This series contains fixes, hardening changes, and general cleanup for the PLPKS code. It addresses error handling and input validation issues, improves the cleanup of sensitive data, and prevents the wrapping_features sysfs attribute from being exposed when the key-wrapping interface is not supported.
Srish Srinivasan (12): pseries/plpks: fix error handling in plpks_read_var() pseries/plpks: fix error code for wrapping key reads pseries/plpks: validate input to plpks_signed_update_var() pseries/plpks: clear sensitive PLPKS buffers pseries/plpks: clear sensitive buffers in wrapping operations pseries/plpks: clear signed update authentication buffer pseries/plpks: clear SED key data after use pseries/plpks: fix self-reference in plpks_var initializer pseries/plpks: hide wrapping_features when unsupported pseries/plpks: make narrowing conversions explicit pseries/plpks: rename the default wrapping key macro pseries/plpks: update PKS documentation and MAINTAINERS entry Documentation/arch/powerpc/papr_hcalls.rst | 16 +++--- MAINTAINERS | 2 +- arch/powerpc/platforms/pseries/plpks-sysfs.c | 20 ++++++-- arch/powerpc/platforms/pseries/plpks.c | 51 ++++++++++--------- .../powerpc/platforms/pseries/plpks_sed_ops.c | 12 +++-- 5 files changed, 61 insertions(+), 40 deletions(-) -- 2.52.0
