From 32cfe286c92090a4658b656ea85d9162e73727f5 Mon Sep 17 00:00:00 2001 From: Siteshwar Vashisht Date: Sun, 4 Oct 2026 08:38:38 +0200 Subject: [PATCH] creds-util: fix validation check for TPM2 PCR mask ... field on big-endian architectures. (cherry picked from commit 542c3cd97a7a1a7f4d29cec2afabc431be2d651e) --- src/shared/creds-util.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/shared/creds-util.c b/src/shared/creds-util.c index 2eefb7f575..cb5d92f6a4 100644 --- a/src/shared/creds-util.c +++ b/src/shared/creds-util.c @@ -1445,7 +1445,7 @@ int decrypt_credential_and_warn( struct tpm2_public_key_credential_header *z_pubkey = NULL; struct tpm2_pinned_srk_credential_header *z_srk = NULL; - if (!TPM2_PCR_MASK_VALID(t->pcr_mask)) + if (!TPM2_PCR_MASK_VALID(le64toh(t->pcr_mask))) return log_error_errno(SYNTHETIC_ERRNO(EBADMSG), "TPM2 PCR mask out of range."); if (!tpm2_hash_alg_to_string(le16toh(t->pcr_bank))) return log_error_errno(SYNTHETIC_ERRNO(EBADMSG), "TPM2 PCR bank invalid or not supported");