From 4e16a160f464641e66d9938f67099d2eeed06003 Mon Sep 17 00:00:00 2001 From: Aidan Garske Date: Mon, 11 May 2026 20:17:56 -0700 Subject: [PATCH] F-3926 - Clamp -ownerauth length in seal_nv example --- examples/nvram/seal_nv.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/examples/nvram/seal_nv.c b/examples/nvram/seal_nv.c index 85b22748..ed67589a 100644 --- a/examples/nvram/seal_nv.c +++ b/examples/nvram/seal_nv.c @@ -196,7 +196,14 @@ int TPM2_NVRAM_SealNV_Example(void* userCtx, int argc, char *argv[]) /* Set owner auth */ parent.hndl = TPM_RH_OWNER; if (XSTRLEN(ownerAuth) > 0) { - parent.auth.size = (int)XSTRLEN(ownerAuth); + size_t authLen = XSTRLEN(ownerAuth); + if (authLen > sizeof(parent.auth.buffer)) { + fprintf(stderr, "-ownerauth value too long (max %zu)\n", + sizeof(parent.auth.buffer)); + rc = BUFFER_E; + goto exit; + } + parent.auth.size = (UINT16)authLen; XMEMCPY(parent.auth.buffer, ownerAuth, parent.auth.size); }