Messages in this thread | | | Date | Wed, 5 Jun 2019 17:33:44 +0300 | From | Jarkko Sakkinen <> | Subject | Re: [PATCH 1/1] tpm: Don't dereference event after it's unmapped in __calc_tpm2_event_size |
| |
On Wed, Jun 05, 2019 at 12:04:33AM +0100, Chris Coulson wrote: > The pointer to the event header is dereferenced on each loop iteration in > order to obtain the digest count, but when called from > tpm2_calc_event_log_size, the event header is unmapped on the first > iteration of the loop. This results in an invalid access for on subsequent > loop iterations for log entries that have more than one digest. > > Signed-off-by: Chris Coulson <chris.coulson@canonical.com>
Reviewed-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
/Jarkko
| |