tpm: fix potential buffer overruns caused by bit glitches on the bus
authorJeremy Boone <[email protected]>
Thu, 8 Feb 2018 20:28:08 +0000 (12:28 -0800)
committerJames Morris <[email protected]>
Mon, 26 Feb 2018 23:43:46 +0000 (15:43 -0800)
commit3be23274755ee85771270a23af7691dc9b3a95db
tree5ab99a5a989b5e83010043345c2ed28f3fd760dc
parent6d24cd186d9fead3722108dec1b1c993354645ff
tpm: fix potential buffer overruns caused by bit glitches on the bus

Discrete TPMs are often connected over slow serial buses which, on
some platforms, can have glitches causing bit flips.  If a bit does
flip it could cause an overrun if it's in one of the size parameters,
so sanity check that we're not overrunning the provided buffer when
doing a memcpy().

Signed-off-by: Jeremy Boone <[email protected]>
Cc: [email protected]
Signed-off-by: James Bottomley <[email protected]>
Reviewed-by: Jarkko Sakkinen <[email protected]>
Tested-by: Jarkko Sakkinen <[email protected]>
Signed-off-by: Jarkko Sakkinen <[email protected]>
Signed-off-by: James Morris <[email protected]>
drivers/char/tpm/tpm-interface.c
drivers/char/tpm/tpm2-cmd.c