tpm: validate TPM 2.0 commands

Browse source

Check for every TPM 2.0 command that the command code is supported and
the command buffer has at least the length that can contain the header
and the handle area.

For ContextSave and FlushContext we mark the body to be part of the
handle area. This gives validation for these commands at zero
cost, including the body of the command.

The more important reason for this is that we can virtualize these
commands in the same way as you would virtualize the handle area of a
command.

Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Tested-by: James Bottomley <James.Bottomley@HansenPartnership.com>
Reviewed-by: James Bottomley <James.Bottomley@HansenPartnership.com>

...

This commit is contained in:

Jarkko Sakkinen 2016-11-10 20:42:07 -08:00

parent 9aa36b399a

commit 58472f5cd4

3 changed files with 132 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

38

drivers/char/tpm/tpm-interface.c

View file

15

drivers/char/tpm/tpm.h

View file

84

drivers/char/tpm/tpm2-cmd.c

View file