Skip to content

Commit 23c112a

Browse files
STChensjforissier
authored andcommitted
tee-supplicant: clear whole rsp_frm buffer
Fix rpmb_data_req() for message types RPMB_MSG_TYPE_REQ_AUTH_KEY_PROGRAM and RPMB_MSG_TYPE_REQ_AUTH_DATA_WRITE: the response frame must be cleared fully before being used. Signed-off-by: Sunny Chen <sunny.chen@st.com> Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org> Acked-by: Jens Wiklander <jens.wiklander@linaro.org> Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>
1 parent 9d09ea1 commit 23c112a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

tee-supplicant/src/rpmb.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -840,7 +840,7 @@ static uint32_t rpmb_data_req(int fd, struct rpmb_data_frame *req_frm,
840840
/* Send result request frame */
841841
cmd = &mcmd->cmds[1];
842842
set_mmc_io_cmd(cmd, req_nfrm, MMC_WRITE_MULTIPLE_BLOCK, 1);
843-
memset(rsp_frm, 0, 1);
843+
memset(rsp_frm, 0, sizeof(*rsp_frm));
844844
rsp_frm->msg_type = htons(RPMB_MSG_TYPE_REQ_RESULT_READ);
845845
mmc_ioc_cmd_set_data((*cmd), (uintptr_t)rsp_frm);
846846

0 commit comments

Comments
 (0)