diff options
| author | Kent Yoder <key@linux.vnet.ibm.com> | 2012-07-25 21:14:02 +0200 |
|---|---|---|
| committer | Kent Yoder <key@linux.vnet.ibm.com> | 2012-08-22 18:11:49 +0200 |
| commit | dd7da132f7f04f34074efd134847a818ea29ddd7 (patch) | |
| tree | 79448a7b8ccfb8531fbec1f241a853b2b911baa9 /drivers/char/nwflash.c | |
| parent | hw_random: add support for the TPM chip as a hardware RNG source (diff) | |
| download | linux-dd7da132f7f04f34074efd134847a818ea29ddd7.tar.xz linux-dd7da132f7f04f34074efd134847a818ea29ddd7.zip | |
tpm: fix double write race and tpm_release free issue
Moved the atomic_set of the data_pending variable until after the
tpm_read has completed processing. The existing code had a window of
time where a second write to the driver could clobber the tpm command
buffer.
Also fixed an issue where if close was called on the tpm device before a
read completed, the tpm command buffer would be returned to the OS,
which could contain sensitive information.
Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
Diffstat (limited to 'drivers/char/nwflash.c')
0 files changed, 0 insertions, 0 deletions