tpm2-tss:3.2.x

Last commit made on 2024-04-26
Get this branch:
git clone -b 3.2.x https://git.launchpad.net/tpm2-tss

Branch merges

Branch information

Name:
3.2.x
Repository:
lp:tpm2-tss

Recent commits

89fa173... by Andreas Fuchs <email address hidden>

Prepare 3.2.3

Signed-off-by: Andreas Fuchs <email address hidden>

63940fb... by Juergen Repp <email address hidden>

FAPI: Fix check of magic number in verify quote.

After deserializing the quote info it was not checked whether
the magic number in the attest is equal TPM2_GENERATED_VALUE.
So an malicious attacker could generate arbitrary quote data
which was not detected by Fapi_VerifyQuote.
Now the number magic number is checket in verify quote and also
in the deserialization of TPM2_GENERATED.
The check is also added to the Unmarshal function for TPMS_ATTEST.

Fixes: CVE-2024-29040

Signed-off-by: Juergen Repp <email address hidden>
Signed-off-by: Andreas Fuchs <email address hidden>

ca6e638... by Andreas Fuchs <email address hidden>

Prepare 3.2.2-rc1

Signed-off-by: Andreas Fuchs <email address hidden>

38e9fa6... by Juergen Repp <email address hidden>

FAPI: Fix length check in auth callback. 3.2.x

The max size of the value returned by the auth value
callback sizeof(TPMU_HA) is now checked.

Signed-off-by: Juergen Repp <email address hidden>

016f1f0... by Andreas Fuchs <email address hidden>

Prepare Release 3.2.2-rc0

Signed-off-by: Andreas Fuchs <email address hidden>

6b2a28a... by Juergen Repp <email address hidden>

esys-test: skip test esys-pcr-auth-value.

Test is skipped if setting of an auth value is not allowed for a pcrNum.

Signed-off-by: Juergen Repp <email address hidden>

7c87de5... by Juergen Repp <email address hidden>

FAPI: Fix warnings unused variable.

* In ifapi_json_TPMS_POLICYAUTHORIZE_serialize it has to be checked
  whether the number of an optional condition is greater zero.
* A warning "unused variable" if LOG_LEVEL == 0 is fixed.

Signed-off-by: Juergen Repp <email address hidden>

a50b90d... by Juergen Repp <email address hidden>

cirrus-ci update image-family to freebsd-13-2

13-1 caused errors during package installation.

Signed-off-by: Juergen Repp <email address hidden>

ae4dd8a... by Juergen Repp <email address hidden>

CI: Update workflow

* To Fix error GitHub actions get stuck in a AddressSanitizer
  "run: sudo sysctl vm.mmap_rnd_bits=28" is temporally
  added to ./github/workflow/main.yml
* Ubuntu 18.04 is removed from the workflow

Signed-off-by: Juergen Repp <email address hidden>

fa741b9... by Juergen Repp <email address hidden>

TCTI device: Fix possible unmarshalling from uninitialized variable.

Ther was no else case in the receive function when the header
was not received but afterwards the partial_size was unmarshalled
from header. Now TSS2_TCTI_RC_GENERAL_FAILURE is returned in
this case.

Signed-off-by: Juergen Repp <email address hidden>