Re: [PATCH v5 04/17] tpm: call tpm2_flush_space() on error in tpm_try_transmit()

2018-11-08 Thread Stefan Berger
On 11/8/18 9:15 AM, Jarkko Sakkinen wrote: Always call tpm2_flush_space() on failure in tpm_try_transmit() so that the volatile memory of the TPM gets cleared. If /dev/tpm0 does not have sufficient permissions (usually it has), this could lead to the leakage of TPM objects. Through /dev/tpmrm0 th

[PATCH v5 04/17] tpm: call tpm2_flush_space() on error in tpm_try_transmit()

2018-11-08 Thread Jarkko Sakkinen
Always call tpm2_flush_space() on failure in tpm_try_transmit() so that the volatile memory of the TPM gets cleared. If /dev/tpm0 does not have sufficient permissions (usually it has), this could lead to the leakage of TPM objects. Through /dev/tpmrm0 this issue does not raise any new security conc