Re: [PATCH v4 1/2] tpm: bounds-check the device-reported response length

[shj]

Ilias,

On 30.07.26 10:36, Ilias Apalodimas wrote:
Do you know if loading the key includes the header in the response?

It does. The LoadKey2 reply is the usual 10-byte header (tag + size +
rc), then the 4-byte key handle at TPM_RESPONSE_HEADER_LENGTH, then the
41-byte auth trailer, so the real minimum is 55. I'll fix it in the next 
iteration.


Thanks,
Shah