[SeaBIOS] Re: [PATCH 2/2] tcgbios: Check for enough bytes returned from TPM2_GetCapability

2019-11-08 Thread Philippe Mathieu-Daudé
On 11/6/19 10:36 PM, Stefan Berger wrote: When querying a TPM 2.0 for its PCRs, make sure that we get enough bytes from it in a response that did not indicate a failure. Basically we are defending against a TPM 2.0 sending responses that are not compliant to the specs. Signed-off-by: Stefan Berg

[SeaBIOS] Re: [PATCH 1/2] tpm: Require a response to have minimum size of a valid response header

2019-11-08 Thread Philippe Mathieu-Daudé
On 11/6/19 10:35 PM, Stefan Berger wrote: Defend against a broken TPM 1.2 or TPM 2.0 that doesn't send at least a full response header in the response but less than 10 bytes. Signed-off-by: Stefan Berger --- src/hw/tpm_drivers.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff -

[SeaBIOS] Re: [PULL 0/1] Seabios 20191106 patches

2019-11-08 Thread Gerd Hoffmann
On Thu, Nov 07, 2019 at 11:56:03AM +, Peter Maydell wrote: > On Wed, 6 Nov 2019 at 12:26, Gerd Hoffmann wrote: > > > > The following changes since commit 36609b4fa36f0ac934874371874416f7533a5408: > > > > Merge remote-tracking branch > > 'remotes/palmer/tags/palmer-for-master-4.2-sf1' into s