2
73%
master: 74%

Ran 09 Nov 2020 05:22AM UTC

Files 56

Run time 6s

Badge

Committed 09 Nov 2020 05:08AM UTC coverage: 73.513%. Remained the same

Job # COVERITY_SCAN_TOKEN=[secure] PREFIX="/usr" CONFIG="--with-openssl --prefix=/usr --enable-test-coverage" SUDO="sudo" CHECK="check" SWTPM_TEST_IBMTSS2="1"

Build Type

push

travis-ci

Committed by

stefanberger

Commit Message

swtpm: Switch to open() from fopen() when accessing statefile

Use the open() call rather than the fopen() call when accessing
the statefile and make sure we do not follow symlinks using O_NOFOLLOW.

The modification does not allow an attacker to create a symbolic link
with the name of the temporary file (TMP2-00.permall for TPM 2) and
have this point to a valueable file and swtpm ends up overwriting the
file. The success of the attack depends on the attacker having access
to the TPM's state directory (--tpmstate dir=...).

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Run Details

3733 of 5078 relevant lines covered (73.51%)

22718.43 hits per line

Source Files on job 2778.2 (COVERITY_SCAN_TOKEN=[secure] PREFIX="/usr" CONFIG="--with-openssl --prefix=/usr --enable-test-coverage" SUDO="sudo" CHECK="check" SWTPM_TEST_IBMTSS2="1")

stefanberger / swtpm / 2778 / 2
73%
master: 74%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 2778.2 (COVERITY_SCAN_TOKEN=[secure] PREFIX="/usr" CONFIG="--with-openssl --prefix=/usr --enable-test-coverage" SUDO="sudo" CHECK="check" SWTPM_TEST_IBMTSS2="1")

stefanberger / swtpm / 2778 / 2 73% master: 74%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 2778.2 (COVERITY_SCAN_TOKEN=[secure] PREFIX="/usr" CONFIG="--with-openssl --prefix=/usr --enable-test-coverage" SUDO="sudo" CHECK="check" SWTPM_TEST_IBMTSS2="1")

stefanberger / swtpm / 2778 / 2
73%
master: 74%

README BADGES
x