2
73%
master: 74%

Ran 13 Nov 2020 02:26PM UTC

Files 56

Run time 8s

Badge

Committed 10 Nov 2020 09:49PM UTC coverage: 73.499%. Remained the same

Job # COVERITY_SCAN_TOKEN=[secure] PREFIX="/usr" CONFIG="--with-openssl --prefix=/usr --enable-test-coverage" SUDO="sudo" CHECK="check" SWTPM_TEST_IBMTSS2="1"

Build Type

push

travis-ci-com

Committed by

stefanberger

Commit Message

swtpm: Use open() (not fopen()) when accessing statefile (CVE-2020-28407)

This patch addresses CVE-2020-28407.

Use the open() call rather than the fopen() call when accessing
the statefile and make sure we do not follow symlinks using O_NOFOLLOW.

The modification does not allow an attacker to create a symbolic link
with the name of the temporary file (TMP2-00.permall for TPM 2) and
have this point to a valueable file and swtpm ends up overwriting the
file. The success of the attack depends on the attacker having access
to the TPM's state directory (--tpmstate dir=...).

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Run Details

3733 of 5079 relevant lines covered (73.5%)

22713.6 hits per line

Source Files on job 2797.2 (COVERITY_SCAN_TOKEN=[secure] PREFIX="/usr" CONFIG="--with-openssl --prefix=/usr --enable-test-coverage" SUDO="sudo" CHECK="check" SWTPM_TEST_IBMTSS2="1")

stefanberger / swtpm / 2797 / 2
73%
master: 74%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 2797.2 (COVERITY_SCAN_TOKEN=[secure] PREFIX="/usr" CONFIG="--with-openssl --prefix=/usr --enable-test-coverage" SUDO="sudo" CHECK="check" SWTPM_TEST_IBMTSS2="1")

stefanberger / swtpm / 2797 / 2 73% master: 74%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 2797.2 (COVERITY_SCAN_TOKEN=[secure] PREFIX="/usr" CONFIG="--with-openssl --prefix=/usr --enable-test-coverage" SUDO="sudo" CHECK="check" SWTPM_TEST_IBMTSS2="1")

stefanberger / swtpm / 2797 / 2
73%
master: 74%

README BADGES
x