WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity

zeroize ARM TEE PS buffers on reuse 

F/3047
pull/762/head
Daniele Lacamera 2026-04-29 12:11:31 +02:00
parent dfc7656071
commit 8eddbf3516
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/arm_tee_psa_ipc.c
View File

@ -28,6 +28,7 @@
#include <psa/crypto.h>
#include <psa/error.h>
#include <wolfssl/wolfcrypt/memory.h>
#include <wolfssl/wolfcrypt/types.h>
#include <wolfboot/arm_tee_api.h>
#include <wolfboot/dice.h>
@ -240,6 +241,7 @@ static struct wolfboot_ps_entry *wolfboot_ps_alloc(psa_storage_uid_t uid)
{
for (size_t i = 0; i < WOLFBOOT_PS_MAX_ENTRIES; i++) {
if (!g_ps_entries[i].in_use) {
ForceZero(g_ps_entries[i].data, sizeof(g_ps_entries[i].data));
g_ps_entries[i].in_use = 1;
g_ps_entries[i].uid = uid;
g_ps_entries[i].size = 0;
@ -844,6 +846,7 @@ int32_t arm_tee_psa_call(psa_handle_t handle, int32_t type,
if (entry == NULL) {
return PSA_ERROR_DOES_NOT_EXIST;
}
ForceZero(entry->data, sizeof(entry->data));
entry->in_use = 0;
entry->uid = 0;
entry->size = 0;