25 Commits

Author SHA1 Message Date
jiangfangjie
f3a4d3ac67 Fix CVE-2023--1018 and CVE-2023-1017
(cherry picked from commit 899999ff567fa4c5c2b4edc8c95eebd8d070df8b)
2023-05-17 19:16:08 +08:00
openeuler-ci-bot
eeac6c506b
!28 [sync] PR-25: fix CVE-2021-3746 and CVE-2021-3623
From: @openeuler-sync-bot 
Reviewed-by: @zhujianwei001 
Signed-off-by: @zhujianwei001
2022-05-18 09:47:23 +00:00
yezengruan
ab4e5b3c28 fix CVE-2021-3623
tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
tpm2: Restore original value if unmarsalled value was illegal

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 5d55c9996cbd302da5022de93c2aa63b01883116)
2022-05-18 17:00:28 +08:00
yezengruan
735d3429d5 rename patch 0001-tpm2-CryptSym-fix-AES-output-IV.patch
renamed:
0001-tpm2-CryptSym-fix-AES-output-IV.patch
-> tpm2-CryptSym-fix-AES-output-IV.patch

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 623a7ba3880baa7b46112b297297a6234ab913fe)
2022-05-18 17:00:28 +08:00
imxcc
92aa70088b fix bare word "debug" in spec
Signed-off-by: imxcc <xingchaochao@huawei.com>
(cherry picked from commit 52b4294beb3a3bdc36aed1144c7260b9417285ad)
2022-05-18 17:00:28 +08:00
jiangfangjie 00559066
808cd56ac4 tpm2-Fix-issue-with-misaligned-address-when-marshall
(cherry picked from commit f9d7a34373e9c6de7ef2a5c63c04c020d994b1c7)
2022-05-18 17:00:28 +08:00
jiangfangjie 00559066
b3567bf3c3 tpm2: Initialize a whole OBJECT before using it and NVMarshal: Handle index orderly RAM without 0-sized
terminating node

fix CVE-2021-3746

Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
(cherry picked from commit b108d104dd093ebb1ad83d28995ecde3b0743152)
2022-05-18 17:00:28 +08:00
openeuler-ci-bot
6ee67f0fcf !15 [sync] PR-13: FIX the issue where the lenth of the generated prime value is insufficient
From: @openeuler-sync-bot
Reviewed-by: @gwei3
Signed-off-by: @gwei3
2021-09-15 11:10:29 +00:00
jiangfangjie 00559066
d6ab0819c4 rename patch file
Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
(cherry picked from commit a1a30376203ea5fefc0ddaeb1f7a1324dd8b8e6b)
2021-09-14 20:07:44 +08:00
jiangfangjie 00559066
276da674c4 update libtpms.spec
(cherry picked from commit ceabec5e4bd71516fe2964830e6183ef3cb3e259)
2021-09-14 20:07:44 +08:00
jiangfangjie 00559066
e27a01249c fix the cve-2021-3505
Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
(cherry picked from commit 49be9bc2aed2a56d88f89efec8d142b9565fc37e)
2021-09-14 20:07:44 +08:00
openeuler-ci-bot
dc637d59e5 !7 tpm2: CryptSym: fix AES output IV
From: @jackjf
Reviewed-by: @zhujianwei001
Signed-off-by: @zhujianwei001
2021-04-14 17:46:16 +08:00
jiangfangjie 00559066
1c62fb2410 update spec file
Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
2021-04-07 10:38:52 +08:00
jiangfangjie 00559066
a1a4809abf tpm2: CryptSym: fix AES output IV
The TPM is supposed to provide the output IV in the ivInOut parameter in
CryptSymmetricEncrypt. In the case of using the openssl routines, the
output IV is missed, and the resulting output from the TPM is in the
input IV.

OpenSSL unfortunately does not export EVP_CIPHER_CTX_iv() until
tags/OpenSSL_1_1_0, so we have to fall back to the reference code for
previous OpenSSL versions.

Fixes: CVE-2021-3446
buglink:https://bugzilla.redhat.com/show_bug.cgi?id=1939664

Signed-off-by: William Roberts <william.c.roberts@intel.com>
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
2021-04-06 18:19:30 +08:00
openeuler-ci-bot
d817276ca1 !6 Update spec file including source0 and source file
From: @jackjf
Reviewed-by: @zhujianwei001
Signed-off-by: @zhujianwei001
2020-09-17 16:41:16 +08:00
jiangfangjie
a5323d08cb update version to versionx
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-17 16:12:45 +08:00
jiangfangjie
2cb9c2ce66 update release
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-16 18:22:58 +08:00
jiangfangjie
f1dc1d5e42 update release
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-16 12:06:12 +08:00
jiangfangjie
9cefddfde8 update release
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-16 09:16:54 +08:00
jiangfangjie
e6e9493e17 update spec file and source file
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-15 20:04:36 +08:00
jiangfangjie
9d9290ce43 add file libtpms-1d392d4.tar.gz
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-15 19:52:33 +08:00
jiangfangjie
d396320548 update source0
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-14 20:18:42 +08:00
openeuler-ci-bot
1481e870f5 !1 Init Packet with version 0.7.3
Merge pull request !1 from JackJF/master
2020-08-24 20:19:19 +08:00
jiangfangjie
602e72bb02 init packet with version 0.7.3
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-08-21 13:09:43 +08:00
openeuler-ci-bot
2d99f22f35 Initial commit 2020-08-21 10:34:08 +08:00