efi_loader: fix possible buffer overflow

Variable "final" will have SHA512 digest, but currently
the array size is not sufficient. Let's fix it.

Signed-off-by: Masahisa Kojima <masahisa.kojima@linaro.org>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Reviewed-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

diff --git a/lib/efi_loader/efi_tcg2.c b/lib/efi_loader/efi_tcg2.c
index ed86a220fbd60984184892d5b7f4ad4cfc9bddb6..d5eca68769b00b55a3c302dca6ced0382018208d 100644 (file)
--- a/lib/efi_loader/efi_tcg2.c
+++ b/lib/efi_loader/efi_tcg2.c
@@ -515,7 +515,7 @@ static efi_status_t tcg2_create_digest(const u8 *input, u32 length,
        sha1_context ctx;
        sha256_context ctx_256;
        sha512_context ctx_512;
-       u8 final[TPM2_ALG_SHA512];
+       u8 final[TPM2_SHA512_DIGEST_SIZE];
        efi_status_t ret;
        u32 active;
        int i;