linux/drivers/char/tpm
Jerry Snitselaar 8569defde8 tpm_crb: check for bad response size
Make sure size of response buffer is at least 6 bytes, or
we will underflow and pass large size_t to memcpy_fromio().
This was encountered while testing earlier version of
locality patchset.

Cc: stable@vger.kernel.org
Fixes: 30fc8d138e ("tpm: TPM 2.0 CRB Interface")
Signed-off-by: Jerry Snitselaar <jsnitsel@redhat.com>
Reviewed-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
2017-04-03 22:46:02 +03:00
..
st33zp24 tpm/st33zp24: Remove unneeded linux/miscdevice.h include 2017-01-23 18:28:18 +02:00
Kconfig tpm: select CONFIG_CRYPTO 2017-04-03 22:46:00 +03:00
Makefile tpm: expose spaces via a device link /dev/tpmrm<n> 2017-04-03 22:46:02 +03:00
tpm1_eventlog.c tpm: add securityfs support for TPM 2.0 firmware event log 2017-02-03 22:03:14 +02:00
tpm2_eventlog.c tpm: add securityfs support for TPM 2.0 firmware event log 2017-02-03 22:03:14 +02:00
tpm2-cmd.c tpm: infrastructure for TPM spaces 2017-04-03 22:46:01 +03:00
tpm2-space.c tpm2: add session handle context saving and restoring to the space code 2017-04-03 22:46:02 +03:00
tpm_acpi.c tpm: add securityfs support for TPM 2.0 firmware event log 2017-02-03 22:03:14 +02:00
tpm_atmel.c tpm: Remove useless priv field in struct tpm_vendor_specific 2016-06-25 17:26:35 +03:00
tpm_atmel.h tpm: remove tpm_read_index and tpm_write_index from tpm.h 2017-02-03 22:03:14 +02:00
tpm_crb.c tpm_crb: check for bad response size 2017-04-03 22:46:02 +03:00
tpm_eventlog.h tpm: add securityfs support for TPM 2.0 firmware event log 2017-02-03 22:03:14 +02:00
tpm_i2c_atmel.c tpm: Factor out common startup code 2016-07-19 17:43:38 +03:00
tpm_i2c_infineon.c tpm: Factor out common startup code 2016-07-19 17:43:38 +03:00
tpm_i2c_nuvoton.c tpm: msleep() delays - replace with usleep_range() in i2c nuvoton driver 2017-04-03 22:46:00 +03:00
tpm_ibmvtpm.c tpm/vtpm: fix kdoc warnings 2017-01-23 18:28:18 +02:00
tpm_ibmvtpm.h tpm_ibmvtpm: properly handle interrupted packet receptions 2015-12-20 15:27:12 +02:00
tpm_infineon.c tpm: Get rid of chip->pdev 2016-06-25 17:26:35 +03:00
tpm_nsc.c tpm: remove tpm_read_index and tpm_write_index from tpm.h 2017-02-03 22:03:14 +02:00
tpm_of.c tpm: enhance read_log_of() to support Physical TPM event log 2017-02-03 22:03:14 +02:00
tpm_ppi.c tpm: move the PPI attributes to character device directory. 2015-10-19 01:01:20 +02:00
tpm_tis_core.c tpm_tis_core: Choose appropriate timeout for reading burstcount 2017-04-03 22:46:00 +03:00
tpm_tis_core.h tpm_tis: use default timeout value if chip reports it as zero 2017-01-23 18:28:18 +02:00
tpm_tis_spi.c tpm_tis_spi: Add small delay after last transfer 2017-04-03 22:46:01 +03:00
tpm_tis.c tpm_tis: fix the error handling of init_tis() 2017-02-14 19:24:33 +02:00
tpm_vtpm_proxy.c tpm/vtpm: fix kdoc warnings 2017-01-23 18:28:18 +02:00
tpm-chip.c tpm2: add session handle context saving and restoring to the space code 2017-04-03 22:46:02 +03:00
tpm-dev-common.c tpm: split out tpm-dev.c into tpm-dev.c and tpm-common-dev.c 2017-04-03 22:46:01 +03:00
tpm-dev.c tpm: split out tpm-dev.c into tpm-dev.c and tpm-common-dev.c 2017-04-03 22:46:01 +03:00
tpm-dev.h tpm: split out tpm-dev.c into tpm-dev.c and tpm-common-dev.c 2017-04-03 22:46:01 +03:00
tpm-interface.c tpm: expose spaces via a device link /dev/tpmrm<n> 2017-04-03 22:46:02 +03:00
tpm-sysfs.c tpm: infrastructure for TPM spaces 2017-04-03 22:46:01 +03:00
tpm.h tpm2: add session handle context saving and restoring to the space code 2017-04-03 22:46:02 +03:00
tpmrm-dev.c tpm2: add session handle context saving and restoring to the space code 2017-04-03 22:46:02 +03:00
xen-tpmfront.c tpm xen: drop unneeded chip variable 2017-02-14 19:24:33 +02:00