WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
2,708 Commits
31 Branches
32 Tags
44 MiB
Commit Graph

707 Commits (74de388458e7ba55f6fa07ca01e57485bf730dd2)

Author SHA1 Message Date
David Garske b456d0eabb Fixes for X86 FSP QEMU test 2026-03-17 22:19:32 +01:00
Daniele Lacamera 1fdb3b36a6 Fixed more copilot findings 2026-03-16 11:11:18 +01:00
Daniele Lacamera 2768ae644f Addressed copilot's comments 2026-03-16 10:34:41 +01:00
Daniele Lacamera 953c9bef29 fix delta trailing escape margin handling 
F/727
 2026-03-16 10:07:48 +01:00
Daniele Lacamera b250d78017 fix tpm unseal auth size validation 
F/729
 2026-03-16 10:05:43 +01:00
Daniele Lacamera 7631649fef fix tpm seal auth size validation 
F/728
 2026-03-16 09:39:34 +01:00
Daniele Lacamera 73b5ad46c9 fix store sbrk heap bounds handling 
F/725
 2026-03-16 09:32:51 +01:00
Daniele Lacamera 3e706be3b9 fix store delete_object header offset 
F/724
 2026-03-16 09:23:22 +01:00
Daniele Lacamera 87a4ffc1e2 Addressed reviewers comments 2026-03-12 11:52:19 +01:00
Daniele Lacamera 2834572212 Fix broken test: FLAGS_HOME requires boot partition mapping 2026-03-12 09:28:51 +01:00
Daniele Lacamera 5b0e8ed00c Added missing unit test file 2026-03-12 09:28:51 +01:00
Daniele Lacamera c544365f54 TPM: RoT comparison made Constant time 
F/448
 2026-03-12 09:28:51 +01:00
Daniele Lacamera 120b284c5b TPM NV blob functions: Limit authsz to buffer capacity 
F/375
 2026-03-12 09:28:51 +01:00
Daniele Lacamera ae1e9dfc06 Force-zero secrets in update_disk.c 
F/97
 2026-03-12 09:28:51 +01:00
Daniele Lacamera 0a8e95f787 strings.c: enforce null-termination on strncpy, optimize strcat 
F/439
F/440
 2026-03-12 09:28:51 +01:00
Daniele Lacamera 62dedfc446 Propagate hal_flash_write() error when writing partition magic 
F/437
 2026-03-12 09:28:51 +01:00
Daniele Lacamera 397b896c42 key_sha384: zero hash buffer to cover for early error 
F/370
 2026-03-12 09:28:51 +01:00
Daniele Lacamera 0b9641f7e9 wolfBoot_unseal_blob: ensure secret is zeroed from stack after use 
F/444
 2026-03-12 09:28:51 +01:00
Daniele Lacamera f7967fc535 wolfBoot_unseal_auth(): secretSz is now in/out param 
The caller is now required to pass the available space in buffer.
The actual size of the unsealed secret is returned.

F/442
 2026-03-12 09:28:51 +01:00
Daniele Lacamera cea7f5d029 Check fw_size when WOLFBOOT_FIXED_PARTITIONS is off 
F/373
 2026-03-12 09:28:51 +01:00
Daniele Lacamera ec3e96995b Validate blob size from TPM NV storage 
F/372
 2026-03-12 09:28:51 +01:00
Daniele Lacamera e99fc2484e Addressed copilot's comments 2026-03-11 14:47:50 +01:00
Daniele Lacamera 6b64e845fa Fix potential OOB-read in delta diff 
F/434
 2026-03-10 16:55:03 +01:00
Daniele Lacamera fb4dd67f6d Make pubkey lookup actually CT by not returning at the match 2026-03-09 19:51:35 +01:00
Daniele Lacamera bad3f6e495 Adjusted footprint limits after new checks 2026-03-09 19:22:53 +01:00
Daniele Lacamera 193d3d44c7 Fix more build issues in CI 2026-03-09 19:01:25 +01:00
Daniele Lacamera 8e5aec2c01 Fixed regressions in CI tests 2026-03-09 16:43:45 +01:00
Daniele Lacamera 9afe8a5e9a Do not rely on alignment when loading RSA exponent 
F/369
 2026-03-09 11:49:14 +01:00
Daniele Lacamera 819ae95989 QSPI: limit page-write loop to remaining bytes 
F/221
 2026-03-09 11:45:32 +01:00
Daniele Lacamera 1596b3b13b Add upper limit for PCI capabilities 
Prevent loops on malformed PCI trees
F/232
 2026-03-09 11:31:44 +01:00
Daniele Lacamera 314f0a5a2b RSA: validate key size buffer when decoding signature 
F/93
 2026-03-09 10:38:28 +01:00
Daniele Lacamera e73b518da0 Fix delta wb_patch double esc corner case 
F/235
 2026-03-09 10:11:55 +01:00
Daniele Lacamera 73f03f2b9f Self update: check size 
Add a maximum size check for fw_size against the expected bootloader partition size

F/230
 2026-03-09 10:02:15 +01:00
Daniele Lacamera 8a73b54ca0 GPT: verify the header CRC32 checksum stored in the header 
F/229
 2026-03-09 09:58:56 +01:00
Daniele Lacamera dc96c47621 Fixed bug in bmdiff 
F/222
 2026-03-09 09:55:38 +01:00
Daniele Lacamera 66badb2874 Improved PSA & PKCS11 store write boundary checks 
F/220
 2026-03-09 09:51:08 +01:00
David Garske 4d2c7bb851 Fix CI build errors 2026-03-09 07:29:27 +01:00
David Garske d23943a5af PolarFire SoC M-Mode, QSPI and L2-LIM support 
Adds support for running wolfBoot in **Machine Mode (M-mode)** on the PolarFire SoC MPFS250T, booting from eNVM and loading a signed application from **SC QSPI flash** into on-chip LIM (Loosely Integrated Memory). No HSS (Hart Software Services) or DDR is required. It also extends the existing PolarFire HAL with multi-hart support, L2 cache configuration, per-hart UART, and refactors shared code (SDHCI, SCB mailbox, linker/test-app) for both S-mode and M-mode builds.
 2026-03-09 07:29:27 +01:00
Paul Adelsbach 260a78e5e3 Fix string compare functions 2026-03-06 19:25:07 +01:00
Brett Nicholas 3ada71953b code review fixes 2026-03-06 17:05:45 +01:00
Brett Nicholas 999a45008d add monoloithic self-update test case and docs 2026-03-06 17:05:45 +01:00
David Garske 4a53bd1627 Added support for running test-app and benchmarks. Added example trace32 scripts. 2026-03-05 17:49:37 +01:00
David Garske 88a32de298 Move .bif and add CI test 2026-03-05 10:12:02 +01:00
David Garske ff8bb8336c Support for wolfBoot ZynqMP (UltraScale+ MPSoC) SD Card 2026-03-05 10:12:02 +01:00
Marco Oliverio 1e8bdfe1dc multiboot.c: add multiboot unit test 2026-03-05 09:43:32 +01:00
David Garske 2277dfa2bf Peer review fix 2026-03-03 12:29:09 +01:00
David Garske d509e91520 More peer review fixes. Fix the wolfCrypt test build. 2026-03-03 12:29:09 +01:00
David Garske 84d44439c2 More peer review fixes 2026-03-03 12:29:09 +01:00
David Garske cbaa132588 Fix for tools/scripts/va416x0/build_test.sh portability (MacOS) 
Added option to support wolfCrypt test/benchmark in test-app
Add some checking if partition size is too large
 2026-03-03 12:29:09 +01:00
Daniele Lacamera a7b1002919 Fix image len bound check in update_ram.c 2026-03-02 13:37:23 +01:00