stefanberger / libtpms / 937

77%

master: 77%

Build Type

push

travis-ci

Committed by Stefan Berger

Commit Message

tpm12: Fix potential buffer overflow in filename creation

Fix a potential buffer overflow bug in the creation of filenames
that were using sprintf() rather than snprintf(). The buffer overflow
could occurr if the buffer is longer than 4096 bytes. The state path
may alone be 4096 bytes and could possibly trigger the overflow.

Swtpm for example is not affected from this since it uses the callbacks
that are invoked before the faulty function is called.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Run Details

14 of 14 new or added lines in 1 file covered. (100.0%)

27268 of 36016 relevant lines covered (75.71%)

81231.11 hits per line