From: Stefan Berger <stef...@linux.vnet.ibm.com> Make sure that the locality passed from the backend to tpm_tis_request_completed() is valid.
Signed-off-by: Stefan Berger <stef...@linux.ibm.com> Reviewed-by: Marc-André Lureau <marcandre.lur...@redhat.com> (cherry picked from commit a639f96111eadb3b8e3021fd3f27e2948ad1c640) Signed-off-by: Michael Roth <mdr...@linux.vnet.ibm.com> --- hw/tpm/tpm_tis.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/hw/tpm/tpm_tis.c b/hw/tpm/tpm_tis.c index 9a795ce96c..1554026788 100644 --- a/hw/tpm/tpm_tis.c +++ b/hw/tpm/tpm_tis.c @@ -295,6 +295,8 @@ static void tpm_tis_request_completed(TPMIf *ti, int ret) uint8_t locty = s->cmd.locty; uint8_t l; + assert(TPM_TIS_IS_VALID_LOCTY(locty)); + if (s->cmd.selftest_done) { for (l = 0; l < TPM_TIS_NUM_LOCALITIES; l++) { s->loc[l].sts |= TPM_TIS_STS_SELFTEST_DONE; -- 2.17.1