On Mon, Jan 13, 2025 at 11:07:07AM +0800, Gary Lin via Grub-devel wrote:
> grub_tpm2_readpublic() and grub_tpm2_testparms() didn't check
> 'authCommand' when marshaling the input data buffer. Currently, there is
> no caller using non-NULL 'authCommand'. However, to avoid the potential
> issue, the
grub_tpm2_readpublic() and grub_tpm2_testparms() didn't check
'authCommand' when marshaling the input data buffer. Currently, there is
no caller using non-NULL 'authCommand'. However, to avoid the potential
issue, the conditional check is added to insert 'authCommand' into the
input buffer if neces
