Add handle flushing

Signed-off-by: Philipp Deppenwiese <[email protected]>
immune-gmbh · Mar 16, 2023 · ea4e4eb · ea4e4eb
1 parent 11ffdd1
commit ea4e4eb
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/cmd/tpm-vuln-checker/cmds.go b/cmd/tpm-vuln-checker/cmds.go
@@ -57,6 +57,7 @@ func (c *checkCmd) Run(ctx *context) error {
 	if !tss.IsTPM2(socket) {
 		return fmt.Errorf("no TPM 2.0 found")
 	}
+	tss.FlushAllHandles(socket)
 	tpmInfo, err := tss.ReadTPM2VendorAttributes(socket)
 	if err != nil {
 		return err

diff --git a/pkg/tss/tpm.go b/pkg/tss/tpm.go
@@ -357,3 +357,22 @@ func NewTPM(emulator bool) (io.ReadWriteCloser, error) {
 	}
 	return rwc, nil
 }
+
+func FlushAllHandles(tpm io.ReadWriteCloser) error {
+	vals, _, err := tpm2.GetCapability(tpm, tpm2.CapabilityHandles, 100, uint32(tpm2.HandleTypeHMACSession)<<24)
+	if err != nil {
+		return err
+	}
+
+	if len(vals) > 0 {
+		for _, handle := range vals {
+			switch t := handle.(type) {
+			default:
+
+			case tpmutil.Handle:
+				tpm2.FlushContext(tpm, t)
+			}
+		}
+	}
+	return nil
+}