)]}' { "log": [ { "commit": "dc005ccf5743a826564a343890e8f24c3cc86725", "tree": "fa415ed954460acc604cfa7b0b14ad4a8201fb84", "parents": [ "3e8e06806ed437e351ccb6c2f348c5268a0b6c17" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 24 08:34:39 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 24 09:03:01 2026 -0400" }, "message": "swtpm: Fix a comparison of different signedness\n\nFix the following compilation issue:\n\n CC libswtpm_libtpms_la-swtpm_nvstore_linear_file.lo\nswtpm_nvstore_linear_file.c: In function \u0027SWTPM_NVRAM_LinearFile_Flush\u0027:\nswtpm_nvstore_linear_file.c:238:28: error: comparison of integer expressions of different signedness: \u0027long int\u0027 and \u0027unsigned int\u0027 [-Werror\u003dsign-compare]\n | } else if (n \u003d\u003d 0 || n \u003e UINT32_MAX) {\n\nResolves: Issue #1169\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "3e8e06806ed437e351ccb6c2f348c5268a0b6c17", "tree": "6277c784b56dd1965a46b1c51f53181527ff659a", "parents": [ "74bf8143524e1a9ed52a93c8a5dc156361f0f1ea" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Fri Aug 21 18:15:11 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 24 09:03:01 2026 -0400" }, "message": "swtpm: Improve handling of case where received state has zero length\n\nSkip the malloc and reception of data in case blob_length is 0. Previoulsy\nmalloc(0) was called when blob_length was 0. malloc returned a valid\npointer with glibc in this case that could be freed. The same is true for\nmusl libc on Linux or glibc on Cygwin.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "74bf8143524e1a9ed52a93c8a5dc156361f0f1ea", "tree": "caa8e36f5aec4391faf5d3960aec7a0347392ccd", "parents": [ "d68556829c39e0878346b3267dcd160f2cf347e2" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Fri Aug 21 18:39:45 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 24 09:03:01 2026 -0400" }, "message": "swtpm: Ignore error in case close() fails in file_read and preserve errno\n\nIgnore the errors in case close() fails in file_read. The data were read,\nso they can be passed to the user and there\u0027s no need to discard them.\nPreserve the errno and not let close() overwrite it.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "d68556829c39e0878346b3267dcd160f2cf347e2", "tree": "3d699adf07e0eb33d7e2a40f0cb4a212fefdb431", "parents": [ "0169f6b3216d59223ca58dedcd571dcf911fd6d4" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Fri Aug 21 18:27:37 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 24 09:03:01 2026 -0400" }, "message": "swtpm: Set td_len \u003d 0 after tlv_data_free for clarity\n\nTo indicate that td has been freed, set td_len to 0 after tlv_data_free.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "0169f6b3216d59223ca58dedcd571dcf911fd6d4", "tree": "6211f9add1287f7376911d40ffb32169f8b15d79", "parents": [ "1683449dfc067aaccd45e6d3d37f2fa59ec8e24a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Fri Aug 21 18:20:24 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 24 09:03:01 2026 -0400" }, "message": "swtpm: Fix a comment to show code as it was before it was changed\n\nFix the code comment to show code as it was before it was changed.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "1683449dfc067aaccd45e6d3d37f2fa59ec8e24a", "tree": "2dfa65843624a9ae9c642aaeb2d5c3b0e6b68995", "parents": [ "93e7c5c4144b3fbc746b0e58d6b1dec815870c94" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Fri Aug 21 17:52:48 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 24 09:03:01 2026 -0400" }, "message": "swtpm_setup: Properly access exit_status for exit code and signal\n\nRework the examination of the exit_status of programs started by\ng_spawn_sync and handle exit codes and signals properly.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "93e7c5c4144b3fbc746b0e58d6b1dec815870c94", "tree": "e1cb021ee3daba87d17721ce320c790fdab7bbee", "parents": [ "5ae16f923450617580bda98aa4467429748761cb" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu Aug 20 11:25:51 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Thu Aug 20 11:42:30 2026 -0400" }, "message": "swtpm_cert: Fix format string for long\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "5ae16f923450617580bda98aa4467429748761cb", "tree": "f45c28a8807962e03fa9e497eff7ac45d25f83a5", "parents": [ "c122632aea8ab1c6692e1f6b8166c15ce8547b47" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu Aug 20 11:19:20 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Thu Aug 20 11:42:30 2026 -0400" }, "message": "swtpm_cert: Error-out on number of days for cert validity \u003c -1\n\nError-out on a negative number of days allowing -1 days for non-expiring\ncertificate.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "c122632aea8ab1c6692e1f6b8166c15ce8547b47", "tree": "88968f6b9bcb2c944b0aeb82114d2fc4f361c6f7", "parents": [ "d882bca008c0fc611e6dd43d5c69bf407006c9e4" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu Aug 20 11:17:59 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Thu Aug 20 11:42:30 2026 -0400" }, "message": "swtpm_cert: Add missing newline to error message\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "d882bca008c0fc611e6dd43d5c69bf407006c9e4", "tree": "74ac69daf3e03aca6181dc29d0ffe4f5be6ddb66", "parents": [ "43204ab33160c3d473e201578653714422a221e1" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu Aug 20 11:02:43 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Thu Aug 20 11:42:30 2026 -0400" }, "message": "swtpm_cert: Rename hex_to_str to hex_to_val and return int\n\nhex_to_str was not a good name for the function returning a number.\nTherefore, rename it to hex_to_val. Also have it return an int rather than\nchar.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "43204ab33160c3d473e201578653714422a221e1", "tree": "6184af5e4a1e62abc57c1771d0aed75565f0a9bf", "parents": [ "b3b85329dc1ec5b87bc8143a9b8094d96839bf3a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu Aug 20 10:53:52 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Thu Aug 20 11:42:30 2026 -0400" }, "message": "swtpm_cert: Add guard checking for userdata (password) being NULL\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "b3b85329dc1ec5b87bc8143a9b8094d96839bf3a", "tree": "c1a319def163d64709b6c16e103fe6c3805e0c52", "parents": [ "895e8b547f92750946e581cffbbe79ab278d9c79" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu Aug 20 10:18:22 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Thu Aug 20 11:42:30 2026 -0400" }, "message": "swtpm_cert: Initialize ser_number_len to 0\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "895e8b547f92750946e581cffbbe79ab278d9c79", "tree": "307946bf30630221cb07345d852b66ed9bbb1bc1", "parents": [ "fb0cc1fd8f3987cce02a41a1f4f7fdf1ca13f234" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 17:52:08 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "swtpm_localca: Remove unused variables due to migration to OpenSSL\n\nSome unused variables were not cleaned up after the migration to OpenSSL.\nDo this now.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "fb0cc1fd8f3987cce02a41a1f4f7fdf1ca13f234", "tree": "95d7fb849f8f49e48d46154db50083aa1e9ff4d4", "parents": [ "69faf07f1fa05543ee375f4ba5b98abd1fb4326d" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 17:24:25 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "CI: Run coverity scan also in ubuntu-26.04 container\n\nFor access to OpenSSL \u003e\u003d 3.5, also run the coverity scan build in a\nubuntu-26.04 container.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "69faf07f1fa05543ee375f4ba5b98abd1fb4326d", "tree": "a14bf091b82c9a910e215298d4da9a763df8376d", "parents": [ "b58372f036c8db768bf10aabef31738e24b5f821" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 15:22:23 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "swtpm: Assign returned value of sysconf to a long rather than uint32_t\n\nAssign the returned value of sysconf to a \u0027long\u0027 rather than uint32_t and\ncheck the \u0027long\u0027 for an error.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "b58372f036c8db768bf10aabef31738e24b5f821", "tree": "199956f75013dd2f489ea681fe289633628f418d", "parents": [ "e9965c94398004aa2318fadfdef626dadc1e5a1a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 15:09:11 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "swtpm: Free decrypt_data in case it was allocated but not passed to caller\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "e9965c94398004aa2318fadfdef626dadc1e5a1a", "tree": "b90f66b96f7eb3bfe16a494efb03e82be6edd27f", "parents": [ "df4918bb023de1c1c54e1b9683c9dc846df16447" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 15:05:18 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "swtpm: Free encrypt_data in case an error occurs\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "df4918bb023de1c1c54e1b9683c9dc846df16447", "tree": "80fb23423f7cc7f46845615ed060644a2ee70bb2", "parents": [ "c9d8e7aa4c99a37a8daef302d45de4f12be8d13b" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 14:52:07 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "swtpm: Log an error if neither /dev/zero nor /dev/null could be opened\n\nFor displaying the info flags it is necessary to start the TPM and for this\nwe need a dummy file descriptor in mlp.fd. So try to open /dev/zero or\n/dev/null and if both fail, display an error message.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "c9d8e7aa4c99a37a8daef302d45de4f12be8d13b", "tree": "69d4a8f26686f1731c2c8b4a8b0e9bbd91dd72ad", "parents": [ "4923e9bc85128646c9486ead0e26fc8e8b987570" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 14:37:49 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "swtpm: Only call logprintf if linebuffer !\u003d NULL avoid printing \u0027(null)\u0027\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "4923e9bc85128646c9486ead0e26fc8e8b987570", "tree": "edb4decc142a0cb6c78f65af9838e4adf6e49fd9", "parents": [ "5b62ea4594797c3348b8d1cb787a1a4d35dcc71c" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 14:30:49 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "swtpm: Log an error message in case RAND_bytes did not return random bytes\n\nLog a warning message in the unlikely case that OpenSSL\u0027s RAND_bytes does\nnot return random bytes.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "5b62ea4594797c3348b8d1cb787a1a4d35dcc71c", "tree": "dea4aef1bdaeb3512e81c7a76067f9b9752aac19", "parents": [ "566471c327c6c2207449054912a2afff9e1cbf94" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Aug 19 14:25:02 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 18:23:30 2026 -0400" }, "message": "swtpm: Check pointer before freeing the memory it points to\n\nCheck the pointer before freeing the memory it points to. This is a cleanup\nthat should not make a difference in practice since \u0027c\u0027 is not modified by\nthe function that frees the memory.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "566471c327c6c2207449054912a2afff9e1cbf94", "tree": "e434b080da693a7b3208712b2263e80a98a2c130", "parents": [ "dc5f5ee3d8261a4d9814ad5da69164a118822401" ], "author": { "name": "Alexander Gryanko", "email": "xpahos@yandex-team.ru", "time": "Wed Aug 19 15:53:53 2026 +0300" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Aug 19 11:26:51 2026 -0400" }, "message": "tests: check for TPM 2.0 in test_tpm2_ctrlchannel3\n\nThe test runs swtpm with --tpm2 but checks for TPM 1.2\nsupport, causing it to be skipped by TPM 2-only builds.\nCheck for TPM 2.0 instead.\n\nSigned-off-by: Alexander Gryanko \u003cxpahos@gmail.com\u003e\n" }, { "commit": "dc5f5ee3d8261a4d9814ad5da69164a118822401", "tree": "cddf51ae40e5bd046c82f2aeb3ca572c55d645f6", "parents": [ "7a0db61bf5ffdfc6df5b678eefbbe4dd806fd63a" ], "author": { "name": "Suraj Theekshana", "email": "surajtheekshanahackerone@gmail.com", "time": "Fri Aug 14 02:34:48 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Tue Aug 18 13:11:03 2026 -0400" }, "message": "swtpm: Fix length check in SWTPM_NVRAM_CheckHeader()\n\nThe length of an incoming blob was compared against sizeof(bh), which is\nthe size of the blobheader pointer rather than the size of the structure.\nblobheader is packed and 10 bytes wide, so on 64-bit builds a blob of 8\nbytes passed the check and the subsequent read of bh-\u003etotlen, which\noccupies offsets 6-9, accessed 2 bytes beyond the buffer. On 32-bit builds\nthe check admitted 4 bytes and the overread was 6.\n\nA blob of this length can be supplied via CMD_SET_STATEBLOB, where\nctrlchannel_receive_state() allocates exactly the length the client\ndeclares.\n\nFixes: CVE-2026-75900\n\nSigned-off-by: Suraj Theekshana \u003csurajtheekshanahackerone@gmail.com\u003e\n" }, { "commit": "7a0db61bf5ffdfc6df5b678eefbbe4dd806fd63a", "tree": "8d4ca7beadcf9246045ce0923cfc589bdf5b6ae2", "parents": [ "37bc61317475713a14c1ca4876098e4950a9d704" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Tue Aug 18 11:06:41 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Tue Aug 18 11:31:13 2026 -0400" }, "message": "swtpm_setup: Remove not needed fds_to_pass and n_fds_to_pass\n\nIt is not necessary to collect all file descriptors passed to swtpm in an\narray. Therefore, entirely remove the array and its size variable from the\ncodebase.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "37bc61317475713a14c1ca4876098e4950a9d704", "tree": "0e83e7a788a5c07162aa12e13edad31ce95902e9", "parents": [ "634d1e59ec694ea95ea670b3debc84811a0875a8" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Tue Aug 18 10:47:35 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Tue Aug 18 11:31:13 2026 -0400" }, "message": "swtpm_setup: Protect parse_rsa_keysize from NULL pointer dereference\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "634d1e59ec694ea95ea670b3debc84811a0875a8", "tree": "ebf8463f88e22850b89baa31b9948d6b23dc6a38", "parents": [ "fb705b57e67bfb2c25b7ce1d48d4476e6b4fe9ff" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Tue Aug 18 10:43:38 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Tue Aug 18 11:31:13 2026 -0400" }, "message": "swtpm_setup: Cast value comparing to write result to ssize_t rather than long\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "fb705b57e67bfb2c25b7ce1d48d4476e6b4fe9ff", "tree": "765afd544ff0d0a8fed8a6ca8140039b4156d0c8", "parents": [ "f61e70d387f9e835d41c7bc2d2186da33fef70ae" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Tue Aug 18 10:40:56 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Tue Aug 18 11:31:13 2026 -0400" }, "message": "swtpm_setup: Remove a completely unused BIO\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "f61e70d387f9e835d41c7bc2d2186da33fef70ae", "tree": "598361123217526c469bab565e83d0fe52e3bac2", "parents": [ "3b8a4d395315598f6ad40358c286af8b05813937" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Tue Aug 18 10:34:32 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Tue Aug 18 11:31:13 2026 -0400" }, "message": "swtpm_setup: Set mod and exp to NULL after transfer to rsakey (OSSL\u003c1.1.0)\n\nTo avoid a double-free on mod and exp, set them to NULL after transfer to\nrsakey via RSA_set0_key. This is for very old versions of OpenSSL \u003c 1.1.0.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "3b8a4d395315598f6ad40358c286af8b05813937", "tree": "454f3417d815520d5739aca354525afabbdf5e1b", "parents": [ "01fe18baa2cab3fb92b32946a2aef1a33d5c511f" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Tue Aug 18 10:25:14 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Tue Aug 18 11:31:13 2026 -0400" }, "message": "swtpm_setup: Use g_strdup for strings assigned to prgname\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "01fe18baa2cab3fb92b32946a2aef1a33d5c511f", "tree": "3520de0d6c0cc8e10a951c9981df3b5df7b4c16b", "parents": [ "3b775987c0ac5385df98127f640d1214e288bacb" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 22:02:25 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Creation of the platform certificate only implies creation of EK\n\nThe creation of the platform certificate only implies the creation of an\nEK. Fix this in the swtpm_setup help screen and man page.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "3b775987c0ac5385df98127f640d1214e288bacb", "tree": "058a525b6216df6fa9e92121be566c3ada866e80", "parents": [ "50aa56987540bfa141994804e0285f93cf1e63fe" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 18:07:28 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Check the SETUP_EK_CERT_F flag when creating IAK or IDevIDs\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "50aa56987540bfa141994804e0285f93cf1e63fe", "tree": "1a9e7c3e9af1e0ec395db9da65ccc6de815a9e32", "parents": [ "be40967634fe00bb729c9444c65f1dc9f9fcb7a7" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 17:58:12 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Fix a typo in the name of a TPM 1.2 related function\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "be40967634fe00bb729c9444c65f1dc9f9fcb7a7", "tree": "249a69552c0e9c03226133441e727eb885312eff", "parents": [ "8be67d149a7f0388f9504fcac4cfb2a8877e34d9" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 17:54:14 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Initialize caller\u0027s array pointer to NULL after freeing it\n\nAvoid returning an invalid pointer to the caller after freeing the memory.\nThis is to avoid a double-free by the caller on the freed memory.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "8be67d149a7f0388f9504fcac4cfb2a8877e34d9", "tree": "6126f9d2609b4b29935252437fd239b09c4599f7", "parents": [ "bc2605d9f6fc344ac71261a1607ea9c107b5e44c" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 17:49:47 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Check for TPM2_GetCapability to have return 27 bytes\n\nAdd a check that TPM2_GetCapability returned 27 bytes before accessing\nthe uint32_t at offset 23.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "bc2605d9f6fc344ac71261a1607ea9c107b5e44c", "tree": "d0778d42729b943353fb01fba86aa74cbb6fedd9", "parents": [ "d22fcb0ffb08f162c0ff0e6e6fe41e106805d96d" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:29:59 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Handle strotoull error cases for file descriptors\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "d22fcb0ffb08f162c0ff0e6e6fe41e106805d96d", "tree": "671ef9fb2b9c84231c49759ba0ccd05b638d3db6", "parents": [ "0f0641113843523528b1a23f8299389d62e2cabd" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 17:30:30 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Display error-\u003emessage set by glib rather than errno string\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "0f0641113843523528b1a23f8299389d62e2cabd", "tree": "510e620cbe23b657145fe678e71ab296dd27b87d", "parents": [ "bd7465111ea1c03d1f818c977c081e4a057262f5" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 17:25:52 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Add missing newline to error message and fix typo\n\nAdd a missing newline to an error message and fix a typo in another one\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "bd7465111ea1c03d1f818c977c081e4a057262f5", "tree": "01ca1bd14766a9b706b9c5dc7e6b8227d9e6b3ba", "parents": [ "994825489ce5c248f958941fd52ac0cf0bbde53f" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 17:24:58 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Fix the TPM 1.2 function name for an error message\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "994825489ce5c248f958941fd52ac0cf0bbde53f", "tree": "a6f174d09ff97390acc47d7ab9d2e0212bdf19bf", "parents": [ "6635f49db11a5b6a66d75f24cc76984ac3e61e41" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 17:14:03 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Also count json_profile_fd \u003d\u003d 0 as a passed file descriptor\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "6635f49db11a5b6a66d75f24cc76984ac3e61e41", "tree": "d1b61fb61e29c0af41d2b01248429cbe5c3bc777", "parents": [ "12800e3d9db38cd6c363b677a105b5ab9fcaaf4b" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 17:09:25 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Fix acceptance of optional parameter to --create-config-file\n\nFix the acceptance of the optional parameter to --create-config-file\nto not accept parameters that start with a \u0027-\u0027 and therefore could be\na subsequent option. This change has no effect on the usage of this\noption.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "12800e3d9db38cd6c363b677a105b5ab9fcaaf4b", "tree": "2b8dbde1465ee6bf4071904367ca1d1d5ce4cd86", "parents": [ "e676c916adb66fb8d7824e344496779d6e07d8d7" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:58:43 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Display an error message if SPK could not be made permanent\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "e676c916adb66fb8d7824e344496779d6e07d8d7", "tree": "b8d8ab7171991dcda519aa9356478e5c9b3d643d", "parents": [ "c5f6828663579002ad87badd3e3b3e5e50996f83" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:55:16 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Fix a typo in the key type used in log messages\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "c5f6828663579002ad87badd3e3b3e5e50996f83", "tree": "20dc6471655d035eb49befb67b81d8a89ad4b11c", "parents": [ "936d12e7e468cb9a1e569d2b23a614a68ad315f7" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:44:44 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Fix formatting string for unsigned long long -\u003e %llu\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "936d12e7e468cb9a1e569d2b23a614a68ad315f7", "tree": "f5d18db36bd0c5b59de7def580bcb05b1726251e", "parents": [ "780454551c45f829106affd3238263c5c500f432" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:41:35 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Remove access to unset error pointer in log statement\n\nThe error pointer is likely not even set at this point, therefore remove it.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "780454551c45f829106affd3238263c5c500f432", "tree": "69b6a3e0c9dff6547f120e5b553f1feddfca0ab6", "parents": [ "656eb2876c1819a531d3dbe70107316b013466b8" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:39:02 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Do not call g_object_unref on potential NULL pointer\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "656eb2876c1819a531d3dbe70107316b013466b8", "tree": "7bfecd7fadcb26e8b8cdcf1ffe6a0289c9389fa2", "parents": [ "0f2d799850c4f8ad557baace433194fcfe264408" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:46:14 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Initialise g_autofree pointer to NULL\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "0f2d799850c4f8ad557baace433194fcfe264408", "tree": "c49422d41c4a9ffe204866e1adcdaabc236577d4", "parents": [ "f9f7d6e207690989943d0127e4035e31cec0a935" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:33:52 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Use g_strdup on g_autofree variables\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "f9f7d6e207690989943d0127e4035e31cec0a935", "tree": "a44890a963da5ae42ea439700392cae73d6b2532", "parents": [ "a7ca25e7d17205715241373b781d8d6e0dde1eb8" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 16:26:30 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 22:27:53 2026 -0400" }, "message": "swtpm_setup: Use be32toh rather than htobe32 when converting wire data\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "a7ca25e7d17205715241373b781d8d6e0dde1eb8", "tree": "fd2f5f0c10fa42e162916e1708812e0f6716aea4", "parents": [ "70b45fefedb77f75ac915a1607de2d9964465153" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 15:27:15 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Display a warning if the passphrase in a file is rather short\n\nWhen a passphrase is only up to 6 bytes long, display a warning message.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "70b45fefedb77f75ac915a1607de2d9964465153", "tree": "20e0d646f0f15a648c3c802b9666bee827cf647e", "parents": [ "3f2e1753f907cf026140959f1e2632418996100f" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 15:00:47 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Fix deduplication logic in strv_dedup\n\nWhen an item at index i is compared against subsequence items in the array,\nthen that item is removed and all other items are moved down by one\nposition. In this case an item with the same content may again appear again\nat index i and yet more duplicates may exist in subsequent items.\nTherefore, index i must not be advanced to be able to duplicate further\nequivalent items.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "3f2e1753f907cf026140959f1e2632418996100f", "tree": "6303cb8d64deb1b660799bb98d113151d519477c", "parents": [ "75976b0dc9df5224c3e280d56ab18d7f8f16ea61" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 14:28:52 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Cast EVP_MAC_final\u0027s outsize parameter to size_t\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "75976b0dc9df5224c3e280d56ab18d7f8f16ea61", "tree": "b56a55f7f75c888ca106b3a98af7a9cfb43c4993", "parents": [ "6062c16cb32c36cb5a5e4226b86463bc18d311c6" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 12:30:53 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Change datatype of variable getting value from snprintf to int\n\nChange the datatype of the value returned from snprintf to int to be\nable to handle n \u003c 0 properly.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "6062c16cb32c36cb5a5e4226b86463bc18d311c6", "tree": "1c59a300cea04df55a45d8739e8c0451f1cfdba8", "parents": [ "9c43f97dd0ced4f32aa08e97e09df9641ea05bb7" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 15:58:39 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Call TPMLIB_SetDebugLevel only after asprintf that could fail\n\nOnly call TPMLIB_SetDebugLevel after asprintf has succeeded.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "9c43f97dd0ced4f32aa08e97e09df9641ea05bb7", "tree": "5776a703ec3b0df4f37576c91315eb60e7ddb0c9", "parents": [ "87241f77f9463ce5a52951745e8bf729e874bab9" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 12:19:15 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Check file descriptor for writability before assigning it to log_fd\n\nReverse the order of assigning log_fd the given fd by first checking that\ngiven fd is writable. This ensures that log_fd remains writable.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "87241f77f9463ce5a52951745e8bf729e874bab9", "tree": "1b59bef8a61e5326ae4459ce4ff5f6afe0dbbc62", "parents": [ "fd51468fd0aa4135358a72937b5db7d88633ed0a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 12:12:54 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Explicitly set ret \u003d -1 in case called function returned ret !\u003d 0\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "fd51468fd0aa4135358a72937b5db7d88633ed0a", "tree": "fc788b8e78608e1e6022a0c925e5852742e0e9e5", "parents": [ "264e46593bce6773f42765a376daae5fa3960f49" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 12:08:08 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Initialize entire sockaddr_in structure before usage\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "264e46593bce6773f42765a376daae5fa3960f49", "tree": "b0d2ba576ec7f1648b24ef857b57c8853bd4a1ba", "parents": [ "9f67a475713d8ad33063af64b256f5d53b355e62" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 11:58:19 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: CMD_HASH_DATA: Limit number of bytes read from file descriptor\n\nIn CMD_HASH_DATA limit the number of bytes read from the file descriptor\nto the remaining number of bytes.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "9f67a475713d8ad33063af64b256f5d53b355e62", "tree": "40c0a1b459c3bc493d0ede7729cf1cf086d8d30a", "parents": [ "e67b07235e6d40aeda26643410a0b85f75853165" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 11:54:13 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Check for NULL pointer returned from strndup\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "e67b07235e6d40aeda26643410a0b85f75853165", "tree": "a038c727b02d316a429e629a95a276e97ac01d03", "parents": [ "bee3a270e2ade60d15eab87f3594aadd3657849f" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 11:48:13 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Log error message in case write_full could not send all bytes\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "bee3a270e2ade60d15eab87f3594aadd3657849f", "tree": "f4487a8d7e62e40b86e6f4e68a9047681c84f0fe", "parents": [ "a0806f96f6dc05d16ce33e6cbea5d6471cc93ac1" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 15:55:16 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Preserve errno in fsync_on_dir\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "a0806f96f6dc05d16ce33e6cbea5d6471cc93ac1", "tree": "5584c80a0646048f4a1aec21e6ca1de175abb72b", "parents": [ "183604d92919c534ecccd0f2322ada28efd8be0b" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 11:23:27 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Only fsync on file and dir if res does not indicate an error\n\nOnly fsync on file and dir if res does not indicate an error. This\navoids clobbering res in one case and unnecessary work in other cases.\nAlso preserve a possible error cases\u0027s errno across calls that may clobber\nit.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "183604d92919c534ecccd0f2322ada28efd8be0b", "tree": "add28993766bc340195740ae072452842f1147a0", "parents": [ "988352e64220c9fe7dddce2052da8506712dc6bc" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 11:17:41 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Use offsetof rather than sizeof to calculate bytes to hash\n\nUse the offsetof rather than sizeof to calculate the number of bytes to\nhash. In this case, offsetof does not make a difference versus usage of\nsizeof, but is the better function to use.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "988352e64220c9fe7dddce2052da8506712dc6bc", "tree": "70679286c3c2ba0e0655d8d8ae66fe003a7898b3", "parents": [ "928e40e29aff8cf1f8a4c6de47513d7f1de13fd6" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 11:11:20 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Use CRYPTO_memcmp rather than memcmp to compare HMAC values\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "928e40e29aff8cf1f8a4c6de47513d7f1de13fd6", "tree": "d18f814501128d3b718891b7ac1068cbec4f86e6", "parents": [ "9cb8d52a317b6627bf20bd3dd7f03306964883b0" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 11:09:08 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Preserve errno across a possible close()\n\nPreserve the errno from fcntl across a possible close() call that coud\nmodify it.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "9cb8d52a317b6627bf20bd3dd7f03306964883b0", "tree": "dcef65c36b07b0b1cf276cd845f31a6fb593a51a", "parents": [ "182098c2e973b43ddf80375e1835ed955fe68564" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 10:24:24 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Wrap strtoul in option_strtoul and extend its usage\n\nWrap strtoul in option_strtoul to avoid parsing a negative number\nand extend its usage to parsing of other positive numbers.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "182098c2e973b43ddf80375e1835ed955fe68564", "tree": "2214d48b968d1a14c790ea70eb01bce891666a27", "parents": [ "12e31d4d714824808f2eb51ea5ebe9b4c960175c" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 09:56:48 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Comment-out rc +\u003d 0 since it does not do much\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "12e31d4d714824808f2eb51ea5ebe9b4c960175c", "tree": "5f3ab365a9f6938676726f6adaa27c45bb0192b9", "parents": [ "3468301d54b14649ac84dec9990bbe4e268ef43a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 09:54:55 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Fix name of file in a comment\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "3468301d54b14649ac84dec9990bbe4e268ef43a", "tree": "40bdc4712d8db7ce145ad9e4fae5c2a6bbb7a7e7", "parents": [ "45e93eff8cc9de69273fd2d13ea031fc1184712a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 09:47:45 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Assign value to log_level after potentially failing asprintf\n\nAssign the new value to log_level only after the potentially failing\nasprintf, which could fail in unlikely case of OOM condition.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "45e93eff8cc9de69273fd2d13ea031fc1184712a", "tree": "f0f5a87dbf6abafa5b173ce5a91bbb5cac3d54ad", "parents": [ "30764b4f695405bd144178861199cba82e75d5bf" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 09:41:45 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Improve the logic setting the pidfile via name or file descriptor\n\nImprove the logic that sets the pidfile. The result is the same as it was\nbefore except that now a potential pidfile file descriptor is closed if\nthe filename is used.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "30764b4f695405bd144178861199cba82e75d5bf", "tree": "043bd85834f7916b324ec4908f5fccf12825f606", "parents": [ "1da9b0057aa44bccfbb134ec245f8e743adee464" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 09:28:19 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Replace deprecated index() with equivalent strchr()\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "1da9b0057aa44bccfbb134ec245f8e743adee464", "tree": "c443a91f372c1f53228f4ef35e5eb672bcce4ce0", "parents": [ "1a5436f0775d68a66797285042553cc57f81e0e4" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 09:08:08 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 16:10:24 2026 -0400" }, "message": "swtpm: Use correct pointer for CMD_SET_LOCALITY response size calculation\n\nUse the pointer to ptm_loc for calculating the response size rather than the\npointer to ptm_reset_est. Both return the same size of 4 bytes.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "1a5436f0775d68a66797285042553cc57f81e0e4", "tree": "39490072b7fe16239ee59f349c7989419b91579a", "parents": [ "66e5e8831022e49a47f2cae34700d5f92c1f843a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 07:47:15 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 08:54:09 2026 -0400" }, "message": "swtpm: Add O_NOFOLLOW to open on linear file backend\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "66e5e8831022e49a47f2cae34700d5f92c1f843a", "tree": "af3f97e7c503ad70c249954f6eae7cff114e811f", "parents": [ "65decd43ad5e885b3f02c21deaf2e66cf2d2ea03" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Mon Aug 17 07:44:42 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Mon Aug 17 08:54:09 2026 -0400" }, "message": "swtpm: Add O_NOFOLLOW for open on pcap file\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "65decd43ad5e885b3f02c21deaf2e66cf2d2ea03", "tree": "583e21b341ca654d9ff6ab7daab3ba8f18bc60e0", "parents": [ "20f432bb5b3eadf9bbc070b16f1cf4387299173a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sun Aug 16 22:42:35 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sun Aug 16 23:07:20 2026 -0400" }, "message": "swtpm: Fix the buffer for the AES IV\n\nRename the SWTPM_AES128/256_BLOCK_SIZE #defines to\nSWTPM_AES128/256_KEY_SIZE and introduce a SWTPM_AES_BLOCK_SIZE #define\nthat is to be used for the IV buffer, which is always 16 bytes for AES.\nEnsure that the IV size passed to the encryption and decryption function\nis at least of the BLOCK_SIZE -- due to a mistake 32 bytes may be passed\nwhen a 256bit key is used even though only 16 bytes will be used.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "20f432bb5b3eadf9bbc070b16f1cf4387299173a", "tree": "99a99a1557a44022ab8d7f3f1367de8200cd2a13", "parents": [ "44a941ffc433958f8e31810c664ac822ce495ff3" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sun Aug 16 22:13:54 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sun Aug 16 22:41:09 2026 -0400" }, "message": "swtpm: Rename bakfile2 to bakfile only if access_res \u003d\u003d 0\n\nRename bakfile2 to bakfile only if access_res \u003d\u003d 0 and the first renaming\nfrom filepath to bakfile2 actually occurred. Propagate an error if the 2nd\nrenaming fails.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "44a941ffc433958f8e31810c664ac822ce495ff3", "tree": "bcfdfcc7ce60c3eba4e2c94ff59cec82da217d54", "parents": [ "aba315b383bbad6854fea8a3f60bccbcb72d2b62" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sun Aug 16 18:12:09 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sun Aug 16 21:11:43 2026 -0400" }, "message": "swtpm: Fix the format string being used on recursive call of logprintfA\n\nUse the proper format string of \"%s\" in case only spaces are being\npassed on the recursive call of logprintfA.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "aba315b383bbad6854fea8a3f60bccbcb72d2b62", "tree": "a1de44505aa9823f1c16f6818b8e62c796692d0b", "parents": [ "3acff44306453ef775f9782773df73d8396ba610" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sun Aug 16 18:06:44 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sun Aug 16 21:11:43 2026 -0400" }, "message": "swtpm: Check for return of \u0027!\u003d 1\u0027 from sscanf\n\nCheck for returned values of !\u003d 1, so cases where the TPM_PORT env.\nvariable holds a bad value. The previous check for \u0027\u003d\u003d -1\u0027 was missing\nthe case \u00270\u0027 was returned in case where the present string doesn\u0027t start\nwith a digit.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "3acff44306453ef775f9782773df73d8396ba610", "tree": "3fe989158066870ccac15ba7307464bd7ca10c00", "parents": [ "561e5242af242a0961b722e24185a31c42524b8e" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sun Aug 16 17:59:47 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sun Aug 16 21:11:43 2026 -0400" }, "message": "swtpm: Correct the calculation of sockaddr_un length\n\nFollow a suggestion to correct the calculation of sockaddr_un length in\ncase there was padding added between sun_family and sun_path. However,\nthere is no padding added on Cygwin, Linux, and BSDs.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "561e5242af242a0961b722e24185a31c42524b8e", "tree": "ac0dd30d8ff9b769be42ef5c70a9db0efa458c4f", "parents": [ "d5ae7364b9c9e92e64314c0eda5bf7cb1d61d21c" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sun Aug 16 17:48:42 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sun Aug 16 21:11:43 2026 -0400" }, "message": "swtpm: Fix parsing of signed and unsigned integer options\n\nUse strtoul to parse unsigned integer and handle errno \u003d ERNAGE cases.\nAdd a misssing return -1 in cases integer option is outside the valid\nrange.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "d5ae7364b9c9e92e64314c0eda5bf7cb1d61d21c", "tree": "b5c55cedc471bd459dcbea3c3dfae8e92f9e15a2", "parents": [ "958e44d6cb2055cbfff4653e4e22f45f94295995" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sun Aug 16 17:51:42 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sun Aug 16 21:11:43 2026 -0400" }, "message": "swtpm: Fix ntonl to ntohl in output of error message\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "958e44d6cb2055cbfff4653e4e22f45f94295995", "tree": "be51bf47e00f8f393562dd35f33b517ab02f6892", "parents": [ "201c46e18bd5d93377b6adba289ce0f5577b9214" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sun Aug 16 17:45:37 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sun Aug 16 21:11:43 2026 -0400" }, "message": "swtpm: Return -1 in unlikely case of add overflow instead of \u00271\u0027\n\nIn the the unlikely case that __builtin_add_overflow indicates an overflow,\nreturn -1 rather than +1.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "201c46e18bd5d93377b6adba289ce0f5577b9214", "tree": "9ea8d966fa8269fa28b4edda48483f7f156b74a0", "parents": [ "3a372825efb3794548f6425cac4db4326a7e2845" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sat Aug 15 11:15:02 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sat Aug 15 11:25:38 2026 -0400" }, "message": "swtpm: Properly check for truncation following snprintf call\n\nUse \u0027\u003e\u003d\u0027 on the returned value from snprintf when comparing it against the\nbuffer size passed into snprintf to determine whether truncation of the\noutput occurred.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "3a372825efb3794548f6425cac4db4326a7e2845", "tree": "e412398b4767d167a2fd30598a0a7b58bd315bb4", "parents": [ "b28685244d15b8e9d8ff6240c8a0b35103dfffda" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sat Aug 15 11:03:37 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sat Aug 15 11:16:50 2026 -0400" }, "message": "swtpm: Close mmap file descriptor in case of fchmod error\n\nClose mmap file descriptor to avoid leaking it in case fchmod fails.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "b28685244d15b8e9d8ff6240c8a0b35103dfffda", "tree": "e7b1cab9220a8e929266a0bface665253c9b0bb6", "parents": [ "db2386b2c1530de3a7fa57a8214c3630e785ec2f" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Sat Aug 15 10:49:48 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Sat Aug 15 11:00:37 2026 -0400" }, "message": "swtpm: Free buffer to avoid memory leak in failure case\n\nFree the allocated buffer in case of an error to avoid a memory leak.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "db2386b2c1530de3a7fa57a8214c3630e785ec2f", "tree": "102011f3e8627bb16d7c31e347bc689a805b00b7", "parents": [ "de323e70d9490bc5cb970a1f9d2d47e348daea29" ], "author": { "name": "Cathy Hu", "email": "cathy.hu@suse.com", "time": "Wed Jul 15 12:17:50 2026 +0200" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jul 15 08:48:14 2026 -0400" }, "message": "Fix policy loading with 3.11 SElinux toolchain (bsc#1271417)\n\nThis is not needed and causes issues with policy loading\ndue to this fix in the 3.11 SELinux toolchain:\nhttps://github.com/SELinuxProject/selinux/commit/81fae2f376f6c4f9928ce29264e534b841e975f5\n\nThe virt_use_nfs is created with \"gen_tunable\":\nhttps://github.com/fedora-selinux/selinux-policy/blob/c905bb439845daff1ff442650b3225ad84ee724a/policy/modules/contrib/virt.te#L69\n\n\"tunable_policy\" is a bool in fedora and openSUSE:\nhttps://github.com/fedora-selinux/selinux-policy/blob/c905bb439845daff1ff442650b3225ad84ee724a/policy/support/loadable_module.spt#L129\n\nAdding \"tunable virt_use_nfs;\" makes it a tunable, not a bool.\n\nSigned-off-by: Cathy Hu \u003ccathy.hu@suse.com\u003e\n" }, { "commit": "de323e70d9490bc5cb970a1f9d2d47e348daea29", "tree": "1a2144e3932dc85c5caef1e4a01db6a3b133a607", "parents": [ "a1d85c9ee73af2d4ebc91fa8a5d06858ebf1b5f2" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Tue Jul 14 13:11:42 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Tue Jul 14 13:33:31 2026 -0400" }, "message": "tests: Extend tpm12 tests patch to fix issues with unused variables\n\nFix issues with unused variables in the TPM 1.2 tools that gcc 16.1.1 now\ncomplains about.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "a1d85c9ee73af2d4ebc91fa8a5d06858ebf1b5f2", "tree": "4d65f15ac7422b83006e3bea98c71fc395261b12", "parents": [ "8356e28a4e885b61af0f97e143f8950b662bfcdd" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu Jun 11 02:45:33 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 10 22:57:27 2026 -0400" }, "message": "man: Document support for IAK and IDevID in swtpm_setup.conf\n\nDocument support for IAK and IDevID via iakkeyalgo and idevidkeyalgo\nkeywords in swtpm_setup.conf.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "8356e28a4e885b61af0f97e143f8950b662bfcdd", "tree": "f8578fca03d477742da4312b22c7056c7f444dba", "parents": [ "9b0bcf3b88b0b51c0b01bf8d7c4eaea2f3e98cb2" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Jun 03 18:51:12 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 16:30:44 2026 -0400" }, "message": "tests: Sign different TPM 2 certificate types with an Ed448 key\n\nUse swtpm_cert to sign the different types of TPM certificates with an\nEd448 key.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "9b0bcf3b88b0b51c0b01bf8d7c4eaea2f3e98cb2", "tree": "3d13b7661076de5b973e8937b155d239d1a3750c", "parents": [ "71cc7a41e066e43b86f56e9af1f817c49ae741e2" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu May 07 23:06:50 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 16:30:44 2026 -0400" }, "message": "tests: Sign different TPM 2 certificate types with an ML-DSA key\n\nUse swtpm_cert to sign the different types of TPM certificates with an\nML-DSA-87 key.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "71cc7a41e066e43b86f56e9af1f817c49ae741e2", "tree": "f4dc16435334d6bd8cc44b6ee6c95e0ff7dd92e1", "parents": [ "b12c5a264c58a04aa8cf5b0d4d51e1c046d90003" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Fri Apr 17 17:06:34 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 16:30:44 2026 -0400" }, "message": "swtpm_cert: Enable signing of EK certificates with hashless signing schemes\n\nEnable swtpm_cert to sign EK certificates with ML-DSA and EdDSA keys.\n\nAn ML-DSA-87 EK signed by an ML-DSA-87 private key (currently) leads to\nan EK certificate of ~7567 bytes. Therefore, large NVRAM spaces are needed\nto store such certificates.\n\nAlso allow signing of the certificates with EdDSA keys, such as Ed25519 and\nEd448.\n\nAdd a recommendation for CA keys to the swtpm_setup man page.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "b12c5a264c58a04aa8cf5b0d4d51e1c046d90003", "tree": "bc1efbebd01f0a9bcaf12be600604b2dc6f79c51", "parents": [ "93f64a1a8eaa0d322a654f45085055a987b5a327" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Apr 08 22:08:20 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 16:30:44 2026 -0400" }, "message": "man: Describe new options for swtpm_cert\n\nAdd descriptions for the --public and --keyalgo command line options for\npassing ML-KEM and ML-DSA public keys to the swtpm_cert man page.\n\nAlso describe the new capabilities.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "93f64a1a8eaa0d322a654f45085055a987b5a327", "tree": "2a242ff4da2b1f1196ac9c7ded425a962b6825c7", "parents": [ "ce2a46169aeb494ef2141d0db9dc03555029d417" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu May 07 21:54:13 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 16:30:44 2026 -0400" }, "message": "tests: Create certificates for ML-DSA and ML-KEM keys\n\nExtend the swtpm_cert test cases to also have ML-DSA and ML-KEM keys\ncertified.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "ce2a46169aeb494ef2141d0db9dc03555029d417", "tree": "354d8ad321406172c59330b1931cd741fef76f24", "parents": [ "841f0f9a1c3dd0467eb5d2a03231d06f1ed224ba" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Apr 08 22:18:41 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 16:30:44 2026 -0400" }, "message": "swtpm_cert: Enable certificate creation for ML-DSA keys\n\nEnable the creation of EK and platform certificates where the\nto-be-certified key is an ML-DSA-44/65/87 key.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "841f0f9a1c3dd0467eb5d2a03231d06f1ed224ba", "tree": "a008833953aca49eda07284705abeec55522a7ea", "parents": [ "ac400260c0ab966bab28102980070f278d4ae809" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Apr 01 17:57:51 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 16:30:44 2026 -0400" }, "message": "swtpm_cert: Enable certificate creation for ML-KEM keys\n\nEnable the creation of EK and platform certificates where the\nto-be-certified key is an ML-KEM-512/768/1024 key.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "ac400260c0ab966bab28102980070f278d4ae809", "tree": "8351960b5d57568fd0110370a5de7c450f78966d", "parents": [ "4fe291dfc08a8072297b23b6dabcbcd213b762ec" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu May 07 15:22:46 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 14:20:15 2026 -0400" }, "message": "tests: Refactor certificate creation tests\n\nRefactor the certificate creation tests to\n- create all needed keys and certs using openssl CLI tool\n- accept input parameters passed to test script\n- grep for more expected data in the created certificates\n- verify the created certificate with the intermediate CA\n- test signing with a secp521r1 key\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "4fe291dfc08a8072297b23b6dabcbcd213b762ec", "tree": "3c21afab596816169717cdfc8d4b0262156249bb", "parents": [ "b96bbfafc4ccc14928cd875dcec925abe5d49ae5" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu May 07 19:40:37 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 14:20:15 2026 -0400" }, "message": "swtpm_cert: Fix the ASN.1 for IAK/IDevID SAN\n\nThe IAK/IDevID certificate did not pass certificate chain verification due\nto malformed ASN.1 in the SAN. Fix the ASN.1 that is put into the SAN to\nhave proper nesting of sequences.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "b96bbfafc4ccc14928cd875dcec925abe5d49ae5", "tree": "f37fa59b5005c7fa49a433296353cbbb207205c7", "parents": [ "69b8ad8b6ed41740408e56cd756807e96683b084" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Thu May 07 14:40:49 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 14:20:15 2026 -0400" }, "message": "swtpm_cert: Adjust error message for \u0027days\u0027 too far in future\n\nX509_time_adj_ex will return a NULL pointer if the days parameter is too\nfar in the future. Therefore adjust the error message. Also avoid a\nmemory leak when the return value was NULL.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "69b8ad8b6ed41740408e56cd756807e96683b084", "tree": "1fb4cdc418d3a540f4d8e284ec81cd91bec6e193", "parents": [ "11f6fa7ed973a0cf44c54dbf05f3b13d0ef8cb6c" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.ibm.com", "time": "Wed Apr 08 22:38:57 2026 -0400" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 14:20:15 2026 -0400" }, "message": "build-sys: Require OpenSSL\u0027s libcrypto \u003e\u003d v3.5 for ML-KEM \u0026 ML-DSA support\n\nRequire that OpenSSL\u0027s libcrypto \u003e\u003d v3.5 is available since ML-KEM and\nML-DSA support was added in this version.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\n" }, { "commit": "11f6fa7ed973a0cf44c54dbf05f3b13d0ef8cb6c", "tree": "76af9c51ff0de4e50d3dfadcb6c22316da664c15", "parents": [ "f80b6e9d32323989c9d49871f69ceaeea872361c" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.vnet.ibm.com", "time": "Wed Jun 03 12:47:13 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 12:40:15 2026 -0400" }, "message": "ci: Move testing into ubuntu:26.04 containers\n\nSince Ubuntu 26.04 as a host runner may take a while until it becomes\navailable move the tests into ubuntu:26.04 containers.\n\nA few more packages are required inside containers.\n\ncpp-coveralls needs to be installed with sudo to avoid the following\ntype of error:\n\n WARNING: The directory \u0027/github/home/.cache/pip\u0027 or its parent directory\n is not owned or is not writable by the current user. The cache has been\n disabled. Check the permissions and owner of that directory. If executing\n pip with sudo, you should use sudo\u0027s -H flag.\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.vnet.ibm.com\u003e\n" }, { "commit": "f80b6e9d32323989c9d49871f69ceaeea872361c", "tree": "444a2cc61110f5b8f3f3ff606d924581afd19fa5", "parents": [ "4a748877d7540e35656dbb918ab3eb18cf866b9a" ], "author": { "name": "Stefan Berger", "email": "stefanb@linux.vnet.ibm.com", "time": "Wed Jun 03 13:05:56 2026 +0000" }, "committer": { "name": "Stefan Berger", "email": "stefanb@us.ibm.com", "time": "Wed Jun 03 12:40:15 2026 -0400" }, "message": "tests: Make some tests work in ubuntu:26.04 containers\n\nFor some reason there are defunct swtpm processes (that used --daemon) on\nubuntu:26.04 after they terminated. Count defunct swtpm processes as having\nfully terminated so that tests can proceed.\n\nThere are also some issues with pkcs11 provider on Ubuntu 26.04 host and\nin ubuntu:26.04 containers. Skip failed pkcs11 tests inside a container.\n\nBug report for pkcs11: https://bugs-devel.debian.org/cgi-bin/bugreport.cgi?bug\u003d1114767\n\nSigned-off-by: Stefan Berger \u003cstefanb@linux.vnet.ibm.com\u003e\n" } ], "next": "4a748877d7540e35656dbb918ab3eb18cf866b9a" }