diff options
| author | Jarkko Sakkinen <jarkko@kernel.org> | 2026-09-01 23:58:06 +0300 |
|---|---|---|
| committer | Jarkko Sakkinen <jarkko@kernel.org> | 2026-09-12 00:43:45 +0300 |
| commit | 114f00d738f15dd8c7318369edcdc53dd6d08763 (patch) | |
| tree | 28e4d0f95ebff76d4382f0be1b3e4083adfcfb87 /tools/perf/scripts/python/bin/stackcollapse-record | |
| parent | 0d6a4268b06084baafd8ee5d66955c7e1c2e053b (diff) | |
| download | linux-next-114f00d738f15dd8c7318369edcdc53dd6d08763.tar.gz linux-next-114f00d738f15dd8c7318369edcdc53dd6d08763.zip | |
KEYS: trusted: Fix tpm2_load_cmd() boundary check
tpm2_load_cmd() does boundary checks against the ASN.1 size i.e.,
payload->blob_len. Address this by passing the decoded blob size to
tpm2_load_cmd(), and use it for the boundary checks.
Cc: stable@vger.kernel.org # v5.13+
Fixes: f2219745250f ("security: keys: trusted: use ASN.1 TPM2 key format for the blobs")
Reported-by: co+6a581c4284f721d4@bugs.sh
Closes: https://bugs.sh/b/6a581c4284f721d4/
Reviewed-by: Stefano Garzarella <sgarzare@redhat.com>
Tested-by: Srish Srinivasan <ssrish@linux.ibm.com>
Link: https://lore.kernel.org/r/20260901205809.2028454-1-jarkko@kernel.org
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-record')
0 files changed, 0 insertions, 0 deletions
