oh, just found a possible problem right after merging this patch... it shouldn't hit that code path at the moment, but I'd really appreciate this being fixed before it will cause problems (only out of bounds read and not an out of bounds write; if it was the latter, I'd have reverted this patch)

View Change

1 comment:

• File src/security/tpm/tss/tcg-2.0/tss_marshaling.c:

  • Patch Set #4, Line 86: tpmtha->digest.sha256

    this should also be replaced, so you don't get an out-of-bounds access when selecting e.q. sha512

To view, visit change 33251. To unsubscribe, or for help writing mail filters, visit settings.