Received: by 2002:a05:6a10:1287:0:0:0:0 with SMTP id d7csp4059422pxv; Mon, 26 Jul 2021 20:08:35 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyIb02gLwxrVBR5S4VueWq/Z5h65XjcOLnr/dmc6nlgIcZe57JEkCZ3bhP2opirevib32eH X-Received: by 2002:aa7:df12:: with SMTP id c18mr25325863edy.62.1627355314858; Mon, 26 Jul 2021 20:08:34 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1627355314; cv=none; d=google.com; s=arc-20160816; b=qXiWpie4JRF/6qvLkfRpvmJt2fM6z+pDnOyiwMUOldY2MO+3PNj5rcTu1Wfc7mUEL6 pnkWNNNukOxpRu7Qp8Q8ueY3OPPifLb2zjRxatvpu89D6yoqFVEWHgfX4ibyOPGSEa63 PqduQ0I+vZwXfr9w9cHw9bZGXpnf4kPgNGE9YzKKD5quk5RUH9jy6i8lAhrm5fzafnJ0 uaUJ8aTrpbIeWUelKBrgR21mnpROeN2k/Z04IUDCVmQ/Cy7X+lcAWEyN1tPYcpRjX1rp fDaVw1uQ5c/OoCQTpTg9S2NHAt1VUjbvsCTeCemsyu1rYKrpzXcYfmvU7opNDvYwvyTy QeQA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=/KjZqCPiklP9ENEZNRKDVLO4f0Pm7zxnIFmkJ/kd+eQ=; b=zVAd4wyBeHai1/Z3BzfClKJWJc4sEjMDBFh8OEaRw+jIGeOMPsQwnAlfjHmz4++4Ec WbrzEEOiEdanmKgY9G4lxMuo2Pl+zrHO18qr2V2Q2voIeZf4+BAhhaiN58OHOZtyoi0F YdFQPT+L9x/NP0ExLeJxmw1CxcJybAsEEih2rzQ9mODkwBzpWZ/xC00LvfJ8zXq1IjUq Qf1IU2rrk9yQEmqvz2XBoak+wNihWbV33E5UB0zQWTWPlRiL/PY/B3sduLaajWWqau6R eNxgUvo7oo1m+dJX4uCMJRjibxcEt8RD2czn3FHxvQa8TEhIaIb7iEJ/4kB/Nw9Kx4cf EHMg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=LpZhvKa5; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id bl4si2071232ejb.689.2021.07.26.20.08.12; Mon, 26 Jul 2021 20:08:34 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=LpZhvKa5; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S234781AbhG0CZc (ORCPT + 99 others); Mon, 26 Jul 2021 22:25:32 -0400 Received: from mail.kernel.org ([198.145.29.99]:43536 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S234726AbhG0CZc (ORCPT ); Mon, 26 Jul 2021 22:25:32 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id 7785460FED; Tue, 27 Jul 2021 03:05:59 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1627355160; bh=QtxTWh/n8Biop96HKPZsq5PVSMW3Hbl5Tg3HH+a4+4Q=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=LpZhvKa5lhQNpDms8e1wK8b1K9zDLAsW54cyOuhmWLvw8yv2mTIbKglf+h7n6w0oh 4hdU1NM+X85DVtipQipwGwtUNWOucpc0wj7kZqxIs9KSVOuknVRlm+avmVCqaosKvI EoECXGHKeZW5TYuE32wZbh105FIduEPplPDotaT8BTZprfZNIpvuRmrMBSfswoU94z eHZkEUhLfwZmG75LsHttpZVd+tjkxOu+k/JW7/mqLbatEBe9E194luuXgR6oIAZveV ixT+AgHizxF+WRE8X1JIdnzWQDInxodqJ2m5m/kEkFCmuSgoHGAwFULhI4JNxT8Ria 8755UjQW+aqQA== Date: Tue, 27 Jul 2021 06:05:57 +0300 From: Jarkko Sakkinen To: Colin King Cc: James Bottomley , Mimi Zohar , David Howells , James Morris , "Serge E . Hallyn" , linux-integrity@vger.kernel.org, keyrings@vger.kernel.org, linux-security-module@vger.kernel.org, kernel-janitors@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH] security: keys: trusted: Fix memory leaks on allocated blob Message-ID: <20210727030557.q7jxepbxh5radvlw@kernel.org> References: <20210723172121.156687-1-colin.king@canonical.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20210723172121.156687-1-colin.king@canonical.com> Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Jul 23, 2021 at 06:21:21PM +0100, Colin King wrote: > From: Colin Ian King > > There are several error return paths that don't kfree the allocated > blob, leading to memory leaks. Ensure blob is initialized to null as > some of the error return paths in function tpm2_key_decode do not > change blob. Add an error return path to kfree blob and use this on > the current leaky returns. > > Addresses-Coverity: ("Resource leak") > Fixes: f2219745250f ("security: keys: trusted: use ASN.1 TPM2 key format for the blobs") > Signed-off-by: Colin Ian King Reviewed-by: Jarkko Sakkinen Probably makes sense (for me) to add also Cc: stable@vger.kernel.org ? /Jarkko