diff options
author | Kent Yoder <key@linux.vnet.ibm.com> | 2012-07-25 19:14:02 (GMT) |
---|---|---|
committer | Kent Yoder <key@linux.vnet.ibm.com> | 2012-08-22 16:11:49 (GMT) |
commit | dd7da132f7f04f34074efd134847a818ea29ddd7 (patch) | |
tree | 79448a7b8ccfb8531fbec1f241a853b2b911baa9 /drivers/char/tpm/tpm_acpi.c | |
parent | 578b016fdc91464c08c096f0c5952cae549fdb8f (diff) | |
download | linux-fsl-qoriq-dd7da132f7f04f34074efd134847a818ea29ddd7.tar.xz |
tpm: fix double write race and tpm_release free issue
Moved the atomic_set of the data_pending variable until after the
tpm_read has completed processing. The existing code had a window of
time where a second write to the driver could clobber the tpm command
buffer.
Also fixed an issue where if close was called on the tpm device before a
read completed, the tpm command buffer would be returned to the OS,
which could contain sensitive information.
Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
Diffstat (limited to 'drivers/char/tpm/tpm_acpi.c')
0 files changed, 0 insertions, 0 deletions