pool/ibmswtpm2
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 758978 from home:mgerstner:branches:security

Browse Source 
- Add ibmswtpm2-fix-empty-decrypt.patch: Fix a corner case in the emulator
  that causes an error when trying to RSA-decrypt an empty message
  (bsc#1159510). This fix was confirmed to be by the upstream author and is
  supposed to be contained in the next release.

OBS-URL: https://build.opensuse.org/request/show/758978
OBS-URL: https://build.opensuse.org/package/show/security/ibmswtpm2?expand=0&rev=18
This commit is contained in:
Marcus Meissner 2020-01-12 13:41:31 +00:00 committed by Git OBS Bridge
parent 24ef90c9aa
commit 09bad69cfd
3 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
ibmswtpm2-fix-empty-decrypt.patch Normal file
View File

@ -0,0 +1,13 @@
Index: ibmswtpm2-1119/src/CryptRsa.c
===================================================================
--- ibmswtpm2-1119.orig/src/CryptRsa.c
+++ ibmswtpm2-1119/src/CryptRsa.c
@@ -469,7 +469,7 @@ RSAES_Decode(
pSize++;
// Make sure that pSize has not gone over the end and that there are at least 8
// bytes of pad data.
- fail = (pSize >= coded->size) | fail;
+ fail = (pSize > coded->size) | fail;
fail = ((pSize - 2) < 8) | fail;
if((message->size < (UINT16)(coded->size - pSize)) || fail)
return TPM_RC_VALUE;

8
ibmswtpm2.changes
View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Mon Dec 23 12:06:22 UTC 2019 - mgerstner <matthias.gerstner@suse.com>
- Add ibmswtpm2-fix-empty-decrypt.patch: Fix a corner case in the emulator
that causes an error when trying to RSA-decrypt an empty message
(bsc#1159510). This fix was confirmed to be by the upstream author and is
supposed to be contained in the next release.
-------------------------------------------------------------------
Thu Jul 4 17:02:41 UTC 2019 - Michal Suchanek <msuchanek@suse.de>

1
ibmswtpm2.spec
View File

@ -34,6 +34,7 @@ URL: https://sourceforge.net/projects/ibmswtpm2
Source: https://sourceforge.net/projects/ibmswtpm2/files/ibmtpm%{version}.tar.gz
Patch1: makefile.patch
Patch2: ibmswtpm2-fix-uninitialized.patch
Patch3: ibmswtpm2-fix-empty-decrypt.patch
BuildRequires: libopenssl-devel >= 1.0
%description