WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Validate NS inputs to TrustZone flash veneers 

Fixes F#4333-4335
pull/794/head
Mattia Moffa 2026-05-29 22:51:37 +02:00 committed by Daniele Lacamera
parent 74c92014c8
commit 88bb215736
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/libwolfboot.c
View File

@ -2471,7 +2471,7 @@ int wolfBoot_nsc_erase_update(uint32_t address, uint32_t len)
if (address > WOLFBOOT_PARTITION_SIZE)
return -1;
if (address + len > WOLFBOOT_PARTITION_SIZE)
if (len > WOLFBOOT_PARTITION_SIZE - address)
return -1;
hal_flash_unlock();
@ -2487,7 +2487,9 @@ int wolfBoot_nsc_write_update(uint32_t address, const uint8_t *buf, uint32_t len
if (address > WOLFBOOT_PARTITION_SIZE)
return -1;
if (address + len > WOLFBOOT_PARTITION_SIZE)
if (len > WOLFBOOT_PARTITION_SIZE - address)
return -1;
if (len > 0 && WOLFBOOT_NSC_NS_RW(buf, len) == NULL)
return -1;
hal_flash_unlock();
ret = hal_flash_write(address + WOLFBOOT_PARTITION_UPDATE_ADDRESS, buf, len);