WolfSSL
/
wolfTPM
mirror of https://github.com/wolfSSL/wolfTPM.git
1
0
Fork 0
Code Issues Releases Wiki Activity

F-3927 - Clamp -password length in keyimport example

pull/503/head
Aidan Garske 2026-05-11 20:18:26 -07:00
parent 4e16a160f4
commit c13dc57879
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
examples/keygen/keyimport.c
View File

@ -191,7 +191,14 @@ int TPM2_Keyimport_Example(void* userCtx, int argc, char *argv[])
/* setup an auth value */
if (password != NULL) {
impKey.handle.auth.size = (int)XSTRLEN(password);
size_t pwLen = XSTRLEN(password);
if (pwLen > sizeof(impKey.handle.auth.buffer)) {
printf("-password too long (max %zu)\n",
sizeof(impKey.handle.auth.buffer));
rc = BUFFER_E;
goto exit;
}
impKey.handle.auth.size = (UINT16)pwLen;
XMEMCPY(impKey.handle.auth.buffer, password, impKey.handle.auth.size);
}