F-3922 - Clamp -auth length in keygen example

pull/503/head
Aidan Garske 2026-05-11 20:17:45 -07:00
parent 6d90662cfa
commit 069dd33772
1 changed files with 6 additions and 0 deletions

View File

@ -286,6 +286,12 @@ int TPM2_Keygen_Example(void* userCtx, int argc, char *argv[])
}
else if (XSTRNCMP(argv[argc-1], "-auth=", XSTRLEN("-auth=")) == 0) {
authStr = argv[argc-1] + XSTRLEN("-auth=");
if (XSTRLEN(authStr) > sizeof(((TPM2B_AUTH*)0)->buffer)) {
printf("-auth value too long (max %zu)\n",
sizeof(((TPM2B_AUTH*)0)->buffer));
usage();
return 0;
}
}
else if (argv[argc-1][0] != '-') {
outputFile = argv[argc-1];