WolfSSL
/
wolfTPM
mirror of https://github.com/wolfSSL/wolfTPM.git
1
0
Fork 0
Code Issues Releases Wiki Activity

F-3918 - Bounds check pcrArray writes in secret_unseal and policy_sign

pull/503/head
Aidan Garske 2026-05-11 20:13:17 -07:00
parent e9d4f583f8
commit 65e0daa9b6
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
examples/boot/secret_unseal.c
View File

@ -167,6 +167,12 @@ int TPM2_Boot_SecretUnseal_Example(void* userCtx, int argc, char *argv[])
usage();
return 0;
}
if (pcrArraySz >= sizeof(pcrArray)) {
printf("Too many -pcr= arguments (max %zu)\n",
sizeof(pcrArray));
usage();
return 0;
}
pcrArray[pcrArraySz] = pcrIndex;
pcrArraySz++;
}

6
examples/pcr/policy_sign.c
View File

@ -274,6 +274,12 @@ int TPM2_PCR_PolicySign_Example(void* userCtx, int argc, char *argv[])
usage();
return 0;
}
if (pcrArraySz >= sizeof(pcrArray)) {
printf("Too many -pcr= arguments (max %zu)\n",
sizeof(pcrArray));
usage();
return 0;
}
pcrArray[pcrArraySz] = pcrIndex;
pcrArraySz++;
}