4 ms·
Also interesting: 2023-01-05 Google followed up indicating that while they consider the code changes to be public, they do not consider them to break embargo p
by bornfreddy 4y ago
Also interesting:
2023-01-05 Google followed up indicating that while they consider the code changes to be public, they do not consider them to break embargo per discussion with CERT and TCG. Also that they cannot provide an answer to the question about their plan to roll out fixes to their devices.
- stefan_ 4y agoThe commit, for reference: https://chromium.googlesource.com/chromiumos/third_party/tpm2/+/3b87ed233acb4c76c27872e1ac0b74dc032199f1%5E%21/ https://chromium.googlesource.com/chromiumos/third_party/tpm... Of course, "fix bound checks" screams VULNERABILITY to every security researcher mindlessly scrolling through the commit logs.