denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pts-file-meas: Fix mismatch between hash buffer size and largest possible hash

Browse Source 
With the referenced commit, SHA-512 was added as a possible hash
function, but the buffer was not adjusted accordingly.

Fixes: 3ef5b23903 ("pts: Variable size PCR banks")
This commit is contained in:
Tobias Brunner
2026-07-24 08:47:36 +02:00
parent 2c65dacf60
commit c720ae2307
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libimcv/pts/pts_file_meas.c
+3 -4
View File
@@ -354,7 +354,6 @@ pts_file_meas_t *pts_file_meas_create_from_path(uint16_t request_id,
private_pts_file_meas_t *this; private_pts_file_meas_t *this;
hash_algorithm_t hash_alg; hash_algorithm_t hash_alg;
hasher_t *hasher; hasher_t *hasher;
u_char hash[HASH_SIZE_SHA384];
chunk_t measurement; chunk_t measurement;
char* filename; char* filename;
bool success = TRUE; bool success = TRUE;
@@ -367,7 +366,7 @@ pts_file_meas_t *pts_file_meas_create_from_path(uint16_t request_id,
DBG1(DBG_PTS, "hasher %N not available", hash_algorithm_names, hash_alg); DBG1(DBG_PTS, "hasher %N not available", hash_algorithm_names, hash_alg);
return NULL; return NULL;
} }
measurement = chunk_create(hash, hasher->get_hash_size(hasher)); measurement = chunk_alloca(hasher->get_hash_size(hasher));
this = (private_pts_file_meas_t*)pts_file_meas_create(request_id); this = (private_pts_file_meas_t*)pts_file_meas_create(request_id);
if (is_dir) if (is_dir)
@@ -389,7 +388,7 @@ pts_file_meas_t *pts_file_meas_create_from_path(uint16_t request_id,
/* measure regular files only */ /* measure regular files only */
if (S_ISREG(st.st_mode) && *rel_name != '.') if (S_ISREG(st.st_mode) && *rel_name != '.')
{ {
if (!hash_file(hasher, abs_name, hash)) if (!hash_file(hasher, abs_name, measurement.ptr))
{ {
continue; continue;
} }
@@ -402,7 +401,7 @@ pts_file_meas_t *pts_file_meas_create_from_path(uint16_t request_id,
} }
else else
{ {
if (!hash_file(hasher, pathname, hash)) if (!hash_file(hasher, pathname, measurement.ptr))
{ {
success = FALSE; success = FALSE;
goto end; goto end;