When trying to send invalid commands (with mismatching commandSize values) to the TPM we discovered some cases in which data is sent to the TPM that should not be sent there. Similar problems were fixed years ago, but this one slipped through it seems.
Alexander Steffen (2): tpm-dev-common: Reject too short writes tpm-interface: Fix checks of buffer size drivers/char/tpm/tpm-dev-common.c | 2 +- drivers/char/tpm/tpm-interface.c | 16 ++++++++-------- drivers/char/tpm/tpm.h | 3 ++- 3 files changed, 11 insertions(+), 10 deletions(-) -- 2.7.4 ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ tpmdd-devel mailing list tpmdd-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tpmdd-devel
