Dan Carpenter dd189feeba tpm: Check for integer overflow in tpm2_map_response_body() ... commit a0bcce2b2a169e10eb265c8f0ebdd5ae4c875670 upstream. The "4 * be32_to_cpu(data->count)" multiplication can potentially overflow which would lead to memory corruption. Add a check for that. Cc: stable@vger.kernel.org Fixes: 745b361e98 ("tpm: infrastructure for TPM spaces") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-11-18 14:03:38 +01:00
..
eventlog	tpm: vtpm_proxy: Avoid reading host log when using a virtual device	2021-05-11 14:47:35 +02:00
st33zp24	tpm/st33zp24: fix spelling mistake "drescription" -> "description"	2020-07-02 17:49:00 +03:00
Kconfig	tpm: tis: add support for MMIO TPM on SynQuacer	2020-10-02 00:21:02 +03:00
Makefile	tpm: tis: add support for MMIO TPM on SynQuacer	2020-10-02 00:21:02 +03:00
tpm_atmel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_atmel.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_crb.c	tpm_crb: fix fTPM on AMD Zen+ CPUs	2019-11-12 21:45:37 +02:00
tpm_ftpm_tee.c	tpm_ftpm_tee: Free and unregister TEE shared memory during kexec	2021-08-12 13:22:13 +02:00
tpm_ftpm_tee.h	tpm/tpm_ftpm_tee: A driver for firmware TPM running inside TEE	2019-09-02 17:08:35 +03:00
tpm_i2c_atmel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
tpm_i2c_infineon.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_i2c_nuvoton.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
tpm_ibmvtpm.c	tpm: ibmvtpm: Avoid error message when process gets signal while waiting	2021-09-15 09:50:30 +02:00
tpm_ibmvtpm.h	tpm: ibmvtpm: Avoid error message when process gets signal while waiting	2021-09-15 09:50:30 +02:00
tpm_infineon.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_nsc.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_ppi.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_tis_core.c	tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status()	2021-07-14 16:56:53 +02:00
tpm_tis_core.h	tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status()	2021-07-14 16:56:53 +02:00
tpm_tis_spi_cr50.c	tpm: tpm_tis_spi_cr50: use new structure for SPI transfer delays	2020-03-13 03:53:16 +02:00
tpm_tis_spi_main.c	tpm_tis_spi: add missing SPI device ID entries	2021-07-14 16:56:01 +02:00
tpm_tis_spi.h	tpm: tpm_tis_spi: Support cr50 devices	2019-11-12 21:45:37 +02:00
tpm_tis_synquacer.c	tpm: tis: add support for MMIO TPM on SynQuacer	2020-10-02 00:21:02 +03:00
tpm_tis.c	tpm_tis: Disable interrupts on ThinkPad T490s	2020-11-06 18:21:00 +02:00
tpm_vtpm_proxy.c	compat_ioctl: move drivers to compat_ptr_ioctl	2019-10-23 17:23:43 +02:00
tpm-chip.c	tpm: Unify the mismatching TPM space buffer sizes	2020-07-24 09:26:23 +03:00
tpm-dev-common.c	tpm: Fix TIS locality timeout problems	2020-07-02 17:48:59 +03:00
tpm-dev.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm-dev.h	tpm: Handle negative priv->response_len in tpm_common_read()	2020-01-08 18:11:09 +02:00
tpm-interface.c	tpm: fix wrong return value in tpm_pcr_extend	2020-04-21 00:06:13 +03:00
tpm-sysfs.c	tpm: use %*ph to print small buffer	2020-10-02 00:21:03 +03:00
tpm.h	KEYS: trusted: Reserve TPM for seal and unseal operations	2021-03-04 11:38:29 +01:00
tpm1-cmd.c	tpm: provide a way to override the chip returned durations	2019-11-12 21:45:36 +02:00
tpm2-cmd.c	tpm: fix error return code in tpm2_get_cc_attrs_tbl()	2021-05-19 10:12:51 +02:00
tpm2-space.c	tpm: Check for integer overflow in tpm2_map_response_body()	2021-11-18 14:03:38 +01:00
tpmrm-dev.c	tpm: Unify the mismatching TPM space buffer sizes	2020-07-24 09:26:23 +03:00
xen-tpmfront.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00