lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20120203173931.GC21715@hardened-box.ibm.com>
Date:	Fri, 3 Feb 2012 15:39:31 -0200
From:	Rajiv Andrade <srajiv@...ux.vnet.ibm.com>
To:	Tim Gardner <tim.gardner@...onical.com>
Cc:	linux-kernel@...r.kernel.org,
	Seth Forshee <seth.forshee@...onical.com>,
	Debora Velarde <debora@...ux.vnet.ibm.com>,
	Marcel Selhorst <m.selhorst@...rix.com>,
	tpmdd-devel@...ts.sourceforge.net, stable@...r.kernel.org
Subject: Re: [PATCH 1/3] TPM: Zero buffer whole after copying to userspace

On Tue, 06 Dec 2011, Tim Gardner wrote:

> Commit 3321c07ae5068568cd61ac9f4ba749006a7185c9 correctly clears the TPM
> buffer if the user specified read length is >= the TPM buffer length. However,
> if the user specified read length is < the TPM buffer length, then part of the
> TPM buffer is left uncleared.
> 
> Reported-by: Seth Forshee <seth.forshee@...onical.com>
> Cc: Debora Velarde <debora@...ux.vnet.ibm.com>
> Cc: Rajiv Andrade <srajiv@...ux.vnet.ibm.com>
> Cc: Marcel Selhorst <m.selhorst@...rix.com>
> Cc: tpmdd-devel@...ts.sourceforge.net
> Cc: stable@...r.kernel.org
> Signed-off-by: Tim Gardner <tim.gardner@...onical.com>

Applied to github.com:srajiv/tpm.git next

Thanks,
Rajiv

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ