From: Jarkko Sakkinen <jarkko@kernel.org>
To: Yuqi Xu <xuyuqiabc@gmail.com>
Cc: linux-integrity@vger.kernel.org, Peter Huewe <peterhuewe@gmx.de>,
Jason Gunthorpe <jgg@ziepe.ca>,
Jerry Snitselaar <jsnitsel@redhat.com>,
James Bottomley <James.Bottomley@hansenpartnership.com>,
stable@vger.kernel.org, Vega <vega@nebusec.ai>,
Ren Wei <weir@nebusec.ai>,
xuyq21@lenovo.com
Subject: Re: [PATCH v2 1/1] tpm: reject duplicate PCR banks in tpm2_get_pcr_allocation
Date: Wed, 21 Oct 2026 13:24:05 +0300 [thread overview]
Message-ID: <atiSxTr7A4CaUo25@kernel.org> (raw)
In-Reply-To: <179257257405.72348.17698648428918034727@gmail.com>
On Wed, Oct 21, 2026 at 04:49:34PM +0800, Yuqi Xu wrote:
> Hi Jarkko,
>
> On Tue, Oct 20, 2026 at 06:30:11PM +0300, Jarkko Sakkinen wrote:
> > OK, so now that I was writing summary of TPM pull request changes, I
> > came into conclusion that this is not a bug fix, unless you can show
> > from TCG specifications that this is possible spec allowed behaviour.
>
> I cannot. Part 1 identifies a PCR bank by its hash algorithm, so one
> hash is one bank. In the TCG reference implementation, TPM2_PCR_Allocate
> keeps only the last selection when the same hash appears more than once,
> and TPM2_GetCapability(TPM_CAP_PCRS) returns that allocation. A
> conformant TPM will not report a duplicate.
>
> > So I can keep the commit but would remove fixes and bug related tags
> > from this. It is essentially hardening and safety measure but not a
> > bug fix.
>
> Please do. Drop Fixes:, Cc: stable, Reported-by:, and Closes:. The code
> change can stay as hardening.
>
> > Do you have something to say that I might have missed?
>
> Only that the commit is not on the current master after the rebase. I
> can send a v3 without those tags if that is easier than reapplying it
> yourself.
Thanks for quick reaction. I can still get it to the pull request.
This was just a question of taxonomy. I think it is otherwise
useful to have this validation in place (i.e. not disregarding
the change overall).
>
> Thanks,
> Yuqi
>
Br, Jarkko
prev parent reply other threads:[~2026-10-21 10:24 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-28 8:26 [PATCH v2 0/1] tpm: reject duplicate PCR banks in tpm2_get_pcr_allocation Yuqi Xu
2026-09-28 8:27 ` [PATCH v2 1/1] " Yuqi Xu
2026-09-29 21:25 ` Jarkko Sakkinen
2026-09-29 22:34 ` Jarkko Sakkinen
2026-09-30 3:33 ` Yuqi Xu
2026-09-30 6:30 ` Yuan Tan
2026-10-02 3:14 ` Jarkko Sakkinen
2026-10-20 15:30 ` Jarkko Sakkinen
2026-10-21 8:49 ` Yuqi Xu
2026-10-21 10:24 ` Jarkko Sakkinen [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=atiSxTr7A4CaUo25@kernel.org \
--to=jarkko@kernel.org \
--cc=James.Bottomley@hansenpartnership.com \
--cc=jgg@ziepe.ca \
--cc=jsnitsel@redhat.com \
--cc=linux-integrity@vger.kernel.org \
--cc=peterhuewe@gmx.de \
--cc=stable@vger.kernel.org \
--cc=vega@nebusec.ai \
--cc=weir@nebusec.ai \
--cc=xuyq21@lenovo.com \
--cc=xuyuqiabc@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.