tee-supplicant: clear whole rsp_frm buffer
Fix rpmb_data_req() for message types RPMB_MSG_TYPE_REQ_AUTH_KEY_PROGRAM
and RPMB_MSG_TYPE_REQ_AUTH_DATA_WRITE: the response frame must be cleared
fully before being used.
Signed-off-by: Sunny Chen <sunny.chen@st.com>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>
diff --git a/tee-supplicant/src/rpmb.c b/tee-supplicant/src/rpmb.c
index d5ea0ea..f90a57d 100644
--- a/tee-supplicant/src/rpmb.c
+++ b/tee-supplicant/src/rpmb.c
@@ -840,7 +840,7 @@
/* Send result request frame */
cmd = &mcmd->cmds[1];
set_mmc_io_cmd(cmd, req_nfrm, MMC_WRITE_MULTIPLE_BLOCK, 1);
- memset(rsp_frm, 0, 1);
+ memset(rsp_frm, 0, sizeof(*rsp_frm));
rsp_frm->msg_type = htons(RPMB_MSG_TYPE_REQ_RESULT_READ);
mmc_ioc_cmd_set_data((*cmd), (uintptr_t)rsp_frm);