Skip to content

Strengthen TPM input validation and memory handling - #565

Merged
dgarske merged 21 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7585-7605
Aug 7, 2026
Merged

Strengthen TPM input validation and memory handling#565
dgarske merged 21 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7585-7605

Conversation

@aidangarske

@aidangarske aidangarske commented Aug 6, 2026

Copy link
Copy Markdown
Member 
F-7585, F-7596, F-7586, F-7587, F-7602, F-7589, F-7594, F-7595, F-7588, F-7590, F-7591, F-7592, F-7597, F-7598,
F-7601, F-7603, F-7604, F-7593, F-7599, F-7600, F-7605

@aidangarske
F-7585 - Parse policy_sign -pcrdigest= hex result in a signed temporary
dc655b6
@aidangarske
F-7596 - Compare pcrDigestSz against remaining buffer capacity
6c3c356
@aidangarske
F-7586 - Keep EK cert verify result out of the example return code
394dce3
@aidangarske
F-7587 - Define TPM_SPI_PIN in the Microchip chip select fallback
2e32fca
@aidangarske
F-7602 - Zeroize HAL I2C write staging buffers
db418eb
@aidangarske
F-7589 - Check I2C busy timeout in Microchip read data and write loops
6833067
@aidangarske
F-7594 - Compare PolicyNV operands in constant time
e514706
@aidangarske
F-7595 - Compare PolicyCounterTimer operands in constant time
790a288
@aidangarske
F-7588 - Reject transcript growth without 32-bit addition wraparound
3ab9027
@aidangarske
F-7590 - Reserve the NUL terminator when clamping -secrethex= input
cc7cb89
@aidangarske
F-7591 - Cap PCR selection count to the entries actually parsed
3f8c84d
@aidangarske
F-7592 - Check BuildPolicyCommandCode status for each policy digest
62427d8
@aidangarske
F-7597 - Clamp shared memory rsp_len to the TIS response FIFO size
d17fb78
@aidangarske
F-7598 - Validate manifest hash size before staging FieldUpgradeStart
d3a61f2
@aidangarske
F-7601 - Zeroize ML-DSA sign and verify sequence input structs
28626aa
@aidangarske
F-7603 - Zeroize crypto callback hash cache before freeing
edcb845
@aidangarske
F-7604 - Zeroize response authentication temporaries in TPM2_Response…
395dc2b 
…Process
@aidangarske
F-7593 - Check GetNvAttributesTemplate status before modifying attrib…
099de0e 
…utes
@aidangarske
F-7599 - Reject authenticated SPDM records shorter than the length field
f86b78d
@aidangarske
F-7600 - Terminate CSR subject components and clear stale bytes
954cd33
@aidangarske
F-7605 - Zeroize hash context in PCRGetDigest and PolicyHash
1401945
@aidangarske
aidangarske requested review from wolfSSL-Fenrir-bot and a lite review from Copilot August 6, 2026 20:11
Copilot AI reviewed Aug 6, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@aidangarske
aidangarske marked this pull request as ready for review August 7, 2026 15:46
@aidangarske
aidangarske requested a review from dgarske August 7, 2026 16:05
@dgarske
dgarske merged commit e4799e4 into wolfSSL:master Aug 7, 2026
193 of 194 checks passed
@aidangarske
aidangarske deleted the fenrir-fixes-7585-7605 branch August 7, 2026 18:23
@MarkAtwood MarkAtwood mentioned this pull request Aug 19, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@dgarske dgarske dgarske approved these changes
@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot Awaiting requested review from wolfSSL-Fenrir-bot

Assignees

@wolfSSL-Bot wolfSSL-Bot

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@aidangarske @dgarske @wolfSSL-Bot