Jeremy Boone
9b8cb28d7c
tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus
...
Discrete TPMs are often connected over slow serial buses which, on
some platforms, can have glitches causing bit flips. In all the
driver _recv() functions, we need to use a u32 to unmarshal the
response size, otherwise a bit flip of the 31st bit would cause the
expected variable to go negative, which would then try to read a huge
amount of data. Also sanity check that the expected amount of data is
large enough for the TPM header.
Signed-off-by: Jeremy Boone <jeremy.boone@nccgroup.trust>
Cc: stable@vger.kernel.org
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
Reviewed-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Signed-off-by: James Morris <james.morris@microsoft.com>
2018-02-26 15:43:44 -08:00
..
agp
pci-v4.16-changes
2018-02-06 09:59:40 -08:00
hw_random
Merge branch 'x86-pti-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2018-02-14 17:02:15 -08:00
ipmi
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
mwave
pcmcia
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
tpm
tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus
2018-02-26 15:43:44 -08:00
xilinx_hwicap
xillybus
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
apm-emulation.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
applicom.c
applicom: constify pci_device_id.
2017-08-28 17:11:28 +02:00
applicom.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
bfin-otp.c
bsr.c
ds1302.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ds1620.c
dsp56k.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
dtlk.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
efirtc.c
generic_nvram.c
hangcheck-timer.c
treewide: Switch DEFINE_TIMER callbacks to struct timer_list *
2017-11-21 15:57:05 -08:00
hpet.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
Kconfig
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
lp.c
char: lp: use true or false for boolean values
2018-01-25 10:56:02 +01:00
Makefile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mbcs.c
mbcs.h
mem.c
/dev/mem: Add bounce buffer for copy-out
2017-12-18 15:59:17 +01:00
misc.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mspec.c
nsc_gpio.c
nvram.c
nwbutton.c
treewide: Switch DEFINE_TIMER callbacks to struct timer_list *
2017-11-21 15:57:05 -08:00
nwbutton.h
treewide: Switch DEFINE_TIMER callbacks to struct timer_list *
2017-11-21 15:57:05 -08:00
nwflash.c
pc8736x_gpio.c
powernv-op-panel.c
ppdev.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
ps3flash.c
random.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
raw.c
rtc.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
scx200_gpio.c
snsc.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
snsc.h
snsc_event.c
sonypi.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
tb0219.c
tile-srom.c
tlclk.c
timer: Remove last user of TIMER_INITIALIZER
2017-10-05 15:01:18 +02:00
toshiba.c
ttyprintk.c
uv_mmtimer.c
virtio_console.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00