diff options
| author |   Daniel Hodges <hodgesd@meta.com> | 2026-01-31 18:40:15 -0800 |
|---|---|---|
| committer |   Mimi Zohar <zohar@linux.ibm.com> | 2026-03-09 10:57:49 -0400 |
| commit | 870819434c8dfcc3158033b66e7851b81bb17e21 (patch) | |
| tree | db29179f5fb3f3aa7b3e739c909246fafc97e05c /tools/perf/scripts/python/stackcollapse.py | |
| parent | ima: Define and use a digest_size field in the ima_algo_desc structure (diff) | |
ima: check return value of crypto_shash_final() in boot aggregate
The return value of crypto_shash_final() is not checked in
ima_calc_boot_aggregate_tfm(). If the hash finalization fails, the
function returns success and a corrupted boot aggregate digest could
be used for IMA measurements.
Capture the return value and propagate any error to the caller.
Fixes: 76bb28f6126f ("ima: use new crypto_shash API instead of old crypto_hash")
Signed-off-by: Daniel Hodges <hodgesd@meta.com>
Reviewed-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Diffstat (limited to 'tools/perf/scripts/python/stackcollapse.py')
0 files changed, 0 insertions, 0 deletions