diff options
| author | Lennart Poettering <lennart@poettering.net> | 2022-08-17 16:49:14 +0200 |
|---|---|---|
| committer | Luca Boccassi <luca.boccassi@gmail.com> | 2022-08-19 20:12:20 +0100 |
| commit | df6c3cbd02b60315ccce011afb060f3aeba2d58f (patch) | |
| tree | c0a446ed356b1dc85408f6db30b17babe89beb9a /src/shared/creds-util.c | |
| parent | d8776eed9b6628ccb7d5dad2e26e7405deac9449 (diff) | |
| download | systemd-df6c3cbd02b60315ccce011afb060f3aeba2d58f.tar.gz | |
tpm2-util: add TPM2_PCR_MASK_VALID() helper
Diffstat (limited to 'src/shared/creds-util.c')
| -rw-r--r-- | src/shared/creds-util.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/shared/creds-util.c b/src/shared/creds-util.c index c1a9d35528..03f5fb8c3f 100644 --- a/src/shared/creds-util.c +++ b/src/shared/creds-util.c @@ -879,7 +879,7 @@ int decrypt_credential_and_warn( #if HAVE_TPM2 struct tpm2_credential_header* t = (struct tpm2_credential_header*) ((uint8_t*) input + p); - if (le64toh(t->pcr_mask) >= (UINT64_C(1) << TPM2_PCRS_MAX)) + if (!TPM2_PCR_MASK_VALID(t->pcr_mask)) return log_error_errno(SYNTHETIC_ERRNO(EBADMSG), "TPM2 PCR mask out of range."); if (!tpm2_pcr_bank_to_string(le16toh(t->pcr_bank))) return log_error_errno(SYNTHETIC_ERRNO(EBADMSG), "TPM2 PCR bank invalid or not supported"); |