Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2231327/?format=api
{ "id": 2231327, "url": "http://patchwork.ozlabs.org/api/patches/2231327/?format=api", "web_url": "http://patchwork.ozlabs.org/project/qemu-devel/patch/20260430155150.2139517-2-stefanb@linux.ibm.com/", "project": { "id": 14, "url": "http://patchwork.ozlabs.org/api/projects/14/?format=api", "name": "QEMU Development", "link_name": "qemu-devel", "list_id": "qemu-devel.nongnu.org", "list_email": "qemu-devel@nongnu.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260430155150.2139517-2-stefanb@linux.ibm.com>", "list_archive_url": null, "date": "2026-04-30T15:51:49", "name": "[v3,1/2] tpm_emulator: Reject a buffer size different than what was requested", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "4a0e53e1cf3e1c4dee12844e8104b4a87214f21e", "submitter": { "id": 75097, "url": "http://patchwork.ozlabs.org/api/people/75097/?format=api", "name": "Stefan Berger", "email": "stefanb@linux.ibm.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/qemu-devel/patch/20260430155150.2139517-2-stefanb@linux.ibm.com/mbox/", "series": [ { "id": 502333, "url": "http://patchwork.ozlabs.org/api/series/502333/?format=api", "web_url": "http://patchwork.ozlabs.org/project/qemu-devel/list/?series=502333", "date": "2026-04-30T15:51:50", "name": "Improve handling of response buffer size in tpm_emulator", "version": 3, "mbox": "http://patchwork.ozlabs.org/series/502333/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2231327/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2231327/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=ibm.com header.i=@ibm.com header.a=rsa-sha256\n header.s=pp1 header.b=ooY21lzd;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=nongnu.org\n (client-ip=209.51.188.17; helo=lists1p.gnu.org;\n envelope-from=qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g5zG82NQVz1xqf\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 01 May 2026 01:52:48 +1000 (AEST)", "from localhost ([::1] helo=lists1p.gnu.org)\n\tby lists1p.gnu.org with esmtp (Exim 4.90_1)\n\t(envelope-from <qemu-devel-bounces@nongnu.org>)\n\tid 1wITgj-0001zC-6w; Thu, 30 Apr 2026 11:52:31 -0400", "from eggs.gnu.org ([2001:470:142:3::10])\n by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <stefanb@linux.ibm.com>)\n id 1wITgJ-0001sK-Py\n for qemu-devel@nongnu.org; Thu, 30 Apr 2026 11:52:05 -0400", "from mx0a-001b2d01.pphosted.com ([148.163.156.1])\n by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <stefanb@linux.ibm.com>)\n id 1wITgI-0004jG-1j\n for qemu-devel@nongnu.org; Thu, 30 Apr 2026 11:52:03 -0400", "from pps.filterd (m0353729.ppops.net [127.0.0.1])\n by mx0a-001b2d01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id\n 63U3nhT6793693; Thu, 30 Apr 2026 15:51:57 GMT", "from ppma21.wdc07v.mail.ibm.com\n (5b.69.3da9.ip4.static.sl-reverse.com [169.61.105.91])\n by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 4drn9rgkst-1\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT);\n Thu, 30 Apr 2026 15:51:57 +0000 (GMT)", "from pps.filterd (ppma21.wdc07v.mail.ibm.com [127.0.0.1])\n by ppma21.wdc07v.mail.ibm.com (8.18.1.7/8.18.1.7) with ESMTP id\n 63UFcpjH004888;\n Thu, 30 Apr 2026 15:51:56 GMT", "from smtprelay07.dal12v.mail.ibm.com ([172.16.1.9])\n by ppma21.wdc07v.mail.ibm.com (PPS) with ESMTPS id 4ds8xkbnj7-1\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT);\n Thu, 30 Apr 2026 15:51:56 +0000 (GMT)", "from smtpav03.wdc07v.mail.ibm.com (smtpav03.wdc07v.mail.ibm.com\n [10.39.53.230])\n by smtprelay07.dal12v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id\n 63UFpt9s32178694\n (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK);\n Thu, 30 Apr 2026 15:51:55 GMT", "from smtpav03.wdc07v.mail.ibm.com (unknown [127.0.0.1])\n by IMSVA (Postfix) with ESMTP id 863D35805C;\n Thu, 30 Apr 2026 15:51:55 +0000 (GMT)", "from smtpav03.wdc07v.mail.ibm.com (unknown [127.0.0.1])\n by IMSVA (Postfix) with ESMTP id E17F358054;\n Thu, 30 Apr 2026 15:51:54 +0000 (GMT)", "from mycroft-2.pok.ibm.com (unknown [9.47.158.222])\n by smtpav03.wdc07v.mail.ibm.com (Postfix) with ESMTP;\n Thu, 30 Apr 2026 15:51:54 +0000 (GMT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc\n :content-transfer-encoding:date:from:in-reply-to:message-id\n :mime-version:references:subject:to; s=pp1; bh=ZJ4beGvkiLwWJgzjW\n nci8oAY86mGpI+ZZqFv1pbTuEg=; b=ooY21lzd03/eDLpwX0lpR+mh+WCderjxh\n FdhLCXlO4OEBEMEh4c2e8w0nsS9nV0wlIzA21TUs6dYd974y4u/DZxT5Y6XG9j4S\n eXUGbWWDqqY3a8sddkShyEDVicuxWLPNUrfdY719fJKdkl/8fyW/1mdeVi5OHaZx\n 7GtNNwc2jtvkUwZN/ALFhocCVSeSdONyxiPh1mEGTYWPJo60OR8QUrzbKJA1n18g\n ZPeWFz43cMQ7KWkj1NkLHAJbY/eOuFQ0/XLZP37uvnpZlKPxbO0DmvBPg+DvWz8Z\n v3+pBjU00lEPljU2tE2M2moBK8iZdrhMdK/AXVUz1ta69hhVTyU3Q==", "From": "Stefan Berger <stefanb@linux.ibm.com>", "To": "qemu-devel@nongnu.org", "Cc": "marcandre.lureau@redhat.com, armenon@redhat.com, philmd@linaro.org,\n Stefan Berger <stefanb@linux.ibm.com>", "Subject": "[PATCH v3 1/2] tpm_emulator: Reject a buffer size different than what\n was requested", "Date": "Thu, 30 Apr 2026 15:51:49 +0000", "Message-ID": "<20260430155150.2139517-2-stefanb@linux.ibm.com>", "X-Mailer": "git-send-email 2.43.0", "In-Reply-To": "<20260430155150.2139517-1-stefanb@linux.ibm.com>", "References": "<20260430155150.2139517-1-stefanb@linux.ibm.com>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "X-TM-AS-GCONF": "00", "X-Proofpoint-GUID": "dak8eDxGGwmuITe0tuiYwM8OjKXUqkc3", "X-Proofpoint-Spam-Details-Enc": "AW1haW4tMjYwNDMwMDE2MyBTYWx0ZWRfXxNjg8xYSO/hw\n 6K0q14hgAAFw3abz5W2WMQCq4A4EfDZbMHzHfKKdXpkmkoSqx4UHFwMStOafIwdOTPE06Maox2t\n wYeLUTHt6/NX9DTbXTaIJjUGwABsvSU5oEBXhjmZjPMZhpBEcalGCz0w01FJF1lkJEto9YargsO\n YN+uTPUpfpA44S8HnA1uRFMNuXVAe/Bzb3WVpVopz4BNlACGQ/bdvATBynF/Tlj4fRtnRCaj9tB\n Kr+h8gVAQP4ERg1hr+DtGI3oGFIw7wZKyzdObPCE4W7GYevk75Q1rvZdVuWCn8GUm8Rm2R0+Cy2\n JCpDH/Gc//O9qWJNUi1xpGYh6F3OzK/YFVsiEoP+oGDhgUJTihXkP4ctC9f/n6WeeU/q3BahcPW\n BagwZ0EQfO/ighTivsDqOypfu+ONJMzwpew0/NbCqjjAfvb/685OXOcJKcV5ep7aHbYbg2Rw2b/\n ylW74DGvKLwLs9oomZg==", "X-Authority-Analysis": "v=2.4 cv=Kc7idwYD c=1 sm=1 tr=0 ts=69f37a9d cx=c_pps\n a=GFwsV6G8L6GxiO2Y/PsHdQ==:117 a=GFwsV6G8L6GxiO2Y/PsHdQ==:17\n a=A5OVakUREuEA:10 a=VkNPw1HP01LnGYTKEx00:22 a=RnoormkPH1_aCDwRdu11:22\n a=uAbxVGIbfxUO_5tXvNgY:22 a=VnNF1IyMAAAA:8 a=lp88FLx_Zl_lkmcsHRgA:9", "X-Proofpoint-ORIG-GUID": "dak8eDxGGwmuITe0tuiYwM8OjKXUqkc3", "X-Proofpoint-Virus-Version": "vendor=baseguard\n engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.51,FMLib:17.12.100.49\n definitions=2026-04-30_04,2026-04-30_02,2025-10-01_01", "X-Proofpoint-Spam-Details": "rule=outbound_notspam policy=outbound score=0\n clxscore=1015 phishscore=0 bulkscore=0 adultscore=0 spamscore=0\n malwarescore=0 impostorscore=0 priorityscore=1501 lowpriorityscore=0\n suspectscore=0 classifier=typeunknown authscore=0 authtc= authcc=\n route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2604200000\n definitions=main-2604300163", "Received-SPF": "pass client-ip=148.163.156.1;\n envelope-from=stefanb@linux.ibm.com;\n helo=mx0a-001b2d01.pphosted.com", "X-Spam_score_int": "-26", "X-Spam_score": "-2.7", "X-Spam_bar": "--", "X-Spam_report": "(-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,\n DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7,\n RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001,\n SPF_PASS=-0.001 autolearn=ham autolearn_force=no", "X-Spam_action": "no action", "X-BeenThere": "qemu-devel@nongnu.org", "X-Mailman-Version": "2.1.29", "Precedence": "list", "List-Id": "qemu development <qemu-devel.nongnu.org>", "List-Unsubscribe": "<https://lists.nongnu.org/mailman/options/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>", "List-Archive": "<https://lists.nongnu.org/archive/html/qemu-devel>", "List-Post": "<mailto:qemu-devel@nongnu.org>", "List-Help": "<mailto:qemu-devel-request@nongnu.org?subject=help>", "List-Subscribe": "<https://lists.nongnu.org/mailman/listinfo/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=subscribe>", "Errors-To": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org", "Sender": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org" }, "content": "When the TIS, SPAPR, or CRB frontends negotiate a buffer size with the\nTPM backend, then the tpm_emulator (swtpm) could still adjust this size\nof the buffer to within bounds supported by swtpm+libtpms if the chosen\nsize was outside the acceptable range. This could theoretically lead to\nthe TPM 2 using a bigger buffer than what was requested and memory\nallocated for. In practice this would not happend since the requested size\nof 4096 bytes for TIS and SPAPR and 3968 bytes for CRB are in the\n(currently) supported range of ~2.5kb to 4096 bytes. With PQC support\nthe range will have an upper bound of 8kb and a lower bound that will\nsupport the (pre-PQC) CRB with 3968 bytes.\n\nSigned-off-by: Stefan Berger <stefanb@linux.ibm.com>\n---\n backends/tpm/tpm_emulator.c | 13 ++++++++++++-\n 1 file changed, 12 insertions(+), 1 deletion(-)", "diff": "diff --git a/backends/tpm/tpm_emulator.c b/backends/tpm/tpm_emulator.c\nindex 75c33d290e..653989ac0e 100644\n--- a/backends/tpm/tpm_emulator.c\n+++ b/backends/tpm/tpm_emulator.c\n@@ -364,6 +364,7 @@ static int tpm_emulator_set_buffer_size(TPMBackend *tb,\n {\n TPMEmulator *tpm_emu = TPM_EMULATOR(tb);\n ptm_setbuffersize psbs;\n+ size_t tpm_buffersize;\n \n if (tpm_emulator_stop_tpm(tb, errp) < 0) {\n return -1;\n@@ -387,8 +388,18 @@ static int tpm_emulator_set_buffer_size(TPMBackend *tb,\n return -1;\n }\n \n+ tpm_buffersize = be32_to_cpu(psbs.u.resp.buffersize);\n+ /* Reject different buffer size used by the TPM than what was requested. */\n+ if (wanted_size != 0 && wanted_size != tpm_buffersize) {\n+ error_setg(errp,\n+ \"tpm-emulator: TPM did not accept the requested buffer size \"\n+ \"of %zu bytes but adjusted it to %zu bytes\\n\",\n+ wanted_size, tpm_buffersize);\n+ return -1;\n+ }\n+\n if (actual_size) {\n- *actual_size = be32_to_cpu(psbs.u.resp.buffersize);\n+ *actual_size = tpm_buffersize;\n }\n \n trace_tpm_emulator_set_buffer_size(\n", "prefixes": [ "v3", "1/2" ] }