From: Jarkko Sakkinen <jarkko@kernel.org>
To: Hanjun Guo <guohanjun@huawei.com>
Cc: Peter Huewe <peterhuewe@gmx.de>,
linux-integrity@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: Re: [PATCH v2 1/3] tpm: acpi: Call acpi_put_table() to fix memory leak
Date: Sun, 27 Nov 2022 19:18:53 +0200 [thread overview]
Message-ID: <Y4Ob/aJ9s5G9zuT7@kernel.org> (raw)
In-Reply-To: <1668684222-38457-2-git-send-email-guohanjun@huawei.com>
On Thu, Nov 17, 2022 at 07:23:40PM +0800, Hanjun Guo wrote:
> The start and length of the event log area are obtained from
> TPM2 or TCPA table, so we call acpi_get_table() to get the
> ACPI information, but the acpi_get_table() should be coupled with
> acpi_put_table() to release the ACPI memory, add the acpi_put_table()
> properly to fix the memory leak.
>
> While we are at it, remove the redundant empty line at the
> end of the tpm_read_log_acpi().
>
> Fixes: 0bfb23746052 ("tpm: Move eventlog files to a subdirectory")
> Fixes: 85467f63a05c ("tpm: Add support for event log pointer found in TPM2 ACPI table")
> Cc: stable@vger.kernel.org
> Signed-off-by: Hanjun Guo <guohanjun@huawei.com>
> ---
> drivers/char/tpm/eventlog/acpi.c | 12 +++++++++---
> 1 file changed, 9 insertions(+), 3 deletions(-)
>
> diff --git a/drivers/char/tpm/eventlog/acpi.c b/drivers/char/tpm/eventlog/acpi.c
> index 1b18ce5..0913d3eb 100644
> --- a/drivers/char/tpm/eventlog/acpi.c
> +++ b/drivers/char/tpm/eventlog/acpi.c
> @@ -90,16 +90,21 @@ int tpm_read_log_acpi(struct tpm_chip *chip)
> return -ENODEV;
>
> if (tbl->header.length <
> - sizeof(*tbl) + sizeof(struct acpi_tpm2_phy))
> + sizeof(*tbl) + sizeof(struct acpi_tpm2_phy)) {
> + acpi_put_table((struct acpi_table_header *)tbl);
> return -ENODEV;
> + }
>
> tpm2_phy = (void *)tbl + sizeof(*tbl);
> len = tpm2_phy->log_area_minimum_length;
>
> start = tpm2_phy->log_area_start_address;
> - if (!start || !len)
> + if (!start || !len) {
> + acpi_put_table((struct acpi_table_header *)tbl);
> return -ENODEV;
> + }
>
> + acpi_put_table((struct acpi_table_header *)tbl);
> format = EFI_TCG2_EVENT_LOG_FORMAT_TCG_2;
> } else {
> /* Find TCPA entry in RSDT (ACPI_LOGICAL_ADDRESSING) */
> @@ -120,8 +125,10 @@ int tpm_read_log_acpi(struct tpm_chip *chip)
> break;
> }
>
> + acpi_put_table((struct acpi_table_header *)buff);
> format = EFI_TCG2_EVENT_LOG_FORMAT_TCG_1_2;
> }
> +
> if (!len) {
> dev_warn(&chip->dev, "%s: TCPA log area empty\n", __func__);
> return -EIO;
> @@ -156,5 +163,4 @@ int tpm_read_log_acpi(struct tpm_chip *chip)
> kfree(log->bios_event_log);
> log->bios_event_log = NULL;
> return ret;
> -
> }
> --
> 1.7.12.4
>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
BR, Jarkko
next prev parent reply other threads:[~2022-11-27 17:19 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-11-17 11:23 [PATCH v2 0/3] ACPI table release for TPM drivers Hanjun Guo
2022-11-17 11:23 ` [PATCH v2 1/3] tpm: acpi: Call acpi_put_table() to fix memory leak Hanjun Guo
2022-11-27 17:18 ` Jarkko Sakkinen [this message]
2022-11-17 11:23 ` [PATCH v2 2/3] tpm: tpm_crb: Add the missed " Hanjun Guo
2022-11-27 17:19 ` Jarkko Sakkinen
2022-11-17 11:23 ` [PATCH v2 3/3] tpm: tpm_tis: " Hanjun Guo
2022-11-27 17:21 ` Jarkko Sakkinen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Y4Ob/aJ9s5G9zuT7@kernel.org \
--to=jarkko@kernel.org \
--cc=guohanjun@huawei.com \
--cc=linux-integrity@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=peterhuewe@gmx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).