On Mon, Sep 16, 2019 at 10:35:35AM +0300, Jarkko Sakkinen wrote: > Set the size of the tpm_buf correctly. Now it is set to the header > length by tpm_buf_init(). > > Reported-by: Mimi Zohar <zohar@xxxxxxxxxxxxx> > Cc: stable@xxxxxxxxxxxxxxx > Fixes: 412eb585587a ("use tpm_buf in tpm_transmit_cmd() as the IO parameter") > Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx> This is all wrong in all possible ways :-( My excuse is the overnight flight last night (no sleep). Mimi, I think what you first proposed as the fix is the right way tho fix it. I'll take some sleep and after that I'll make a legit commit with fix and a commit message explaining the root cause. Please try to ignore this. /Jarkko