Dan Carpenter d4efa4181d tpm: Check for integer overflow in tpm2_map_response_body() ... commit a0bcce2b2a upstream. The "4 * be32_to_cpu(data->count)" multiplication can potentially overflow which would lead to memory corruption. Add a check for that. Cc: stable@vger.kernel.org Fixes: 745b361e98 ("tpm: infrastructure for TPM spaces") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-11-18 19:15:53 +01:00
..
eventlog	tpm: vtpm_proxy: Avoid reading host log when using a virtual device	2021-04-14 16:30:30 +03:00
st33zp24	tpm/st33zp24: fix spelling mistake "drescription" -> "description"	2020-07-02 17:49:00 +03:00
Kconfig	char: tpm: Kconfig: remove bad i2c cr50 select	2021-08-23 19:55:42 +03:00
Makefile	char: tpm: add i2c driver for cr50	2021-02-16 10:40:27 +02:00
tpm-chip.c	tpm: Remove unintentional dump_stack() call	2021-03-03 17:43:52 +02:00
tpm-dev-common.c	tpm: Remove tpm_dev_wq_lock	2021-02-16 10:40:27 +02:00
tpm-dev.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm-dev.h	tpm: Handle negative priv->response_len in tpm_common_read()	2020-01-08 18:11:09 +02:00
tpm-interface.c	tpm: fix wrong return value in tpm_pcr_extend	2020-04-21 00:06:13 +03:00
tpm-sysfs.c	tpm: add sysfs exports for all banks of PCR registers	2021-02-16 10:40:27 +02:00
tpm.h	KEYS: trusted: Reserve TPM for seal and unseal operations	2021-02-16 10:40:28 +02:00
tpm1-cmd.c	tpm: fix some doc warnings in tpm1-cmd.c	2021-06-23 16:51:03 +03:00
tpm2-cmd.c	tpm: add longer timeout for TPM2_CC_VERIFY_SIGNATURE	2021-06-23 16:51:03 +03:00
tpm2-space.c	tpm: Check for integer overflow in tpm2_map_response_body()	2021-11-18 19:15:53 +01:00
tpm_atmel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_atmel.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_crb.c	tpm_crb: Use IOMEM_ERR_PTR when function returns iomem	2021-06-23 16:51:03 +03:00
tpm_ftpm_tee.c	tpm_ftpm_tee: Free and unregister TEE shared memory during kexec	2021-07-21 07:55:50 +02:00
tpm_ftpm_tee.h	tpm/tpm_ftpm_tee: A driver for firmware TPM running inside TEE	2019-09-02 17:08:35 +03:00
tpm_i2c_atmel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
tpm_i2c_infineon.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_i2c_nuvoton.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
tpm_ibmvtpm.c	tpm: ibmvtpm: Avoid error message when process gets signal while waiting	2021-08-23 19:55:42 +03:00
tpm_ibmvtpm.h	tpm: ibmvtpm: Avoid error message when process gets signal while waiting	2021-08-23 19:55:42 +03:00
tpm_infineon.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_nsc.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441	2019-06-05 17:37:17 +02:00
tpm_ppi.c	tpm/ppi: Constify static struct attribute_group	2021-02-16 10:40:27 +02:00
tpm_tis.c	tpm_tis: Use DEFINE_RES_MEM() to simplify code	2021-06-23 16:51:03 +03:00
tpm_tis_core.c	tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status()	2021-06-23 16:51:04 +03:00
tpm_tis_core.h	tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status()	2021-06-23 16:51:04 +03:00
tpm_tis_i2c_cr50.c	char: tpm: cr50_i2c: convert to new probe interface	2021-08-23 19:55:42 +03:00
tpm_tis_spi.h	tpm: tpm_tis_spi: Support cr50 devices	2019-11-12 21:45:37 +02:00
tpm_tis_spi_cr50.c	tpm: tpm_tis_spi_cr50: use new structure for SPI transfer delays	2020-03-13 03:53:16 +02:00
tpm_tis_spi_main.c	tpm_tis_spi: add missing SPI device ID entries	2021-06-23 16:51:03 +03:00
tpm_tis_synquacer.c	tpm: tis: add support for MMIO TPM on SynQuacer	2020-10-02 00:21:02 +03:00
tpm_vtpm_proxy.c	compat_ioctl: move drivers to compat_ptr_ioctl	2019-10-23 17:23:43 +02:00
tpmrm-dev.c	tpm: Unify the mismatching TPM space buffer sizes	2020-07-24 09:26:23 +03:00
xen-tpmfront.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00