On Mon, Jan 13, 2025 at 11:07:07AM +0800, Gary Lin via Grub-devel wrote: > grub_tpm2_readpublic() and grub_tpm2_testparms() didn't check > 'authCommand' when marshaling the input data buffer. Currently, there is > no caller using non-NULL 'authCommand'. However, to avoid the potential > issue, the conditional check is added to insert 'authCommand' into the > input buffer if necessary. > > Also fix a few pointer checks. > > Signed-off-by: Gary Lin <g...@suse.com> > Reviewed-by: Stefan Berger <stef...@linux.ibm.com>
Reviewed-by: Daniel Kiper <daniel.ki...@oracle.com> Daniel _______________________________________________ Grub-devel mailing list Grub-devel@gnu.org https://lists.gnu.org/mailman/listinfo/grub-devel