WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
3,270 Commits
31 Branches
32 Tags
44 MiB
Commit Graph

190 Commits (c4e853ea4b13cc3bcbf701f4f648afeb0fbe095f)

Author SHA1 Message Date
Daniele Lacamera cc6f52edb3 Add final sanity check after boot hook 
F/3302
 2026-04-29 12:20:41 +02:00
Daniele Lacamera b6e6dc022e Harden local secret comparisons 
F/3041
 2026-04-29 11:29:56 +02:00
Daniele Lacamera f86ffd8ffc Fix delta update cleanup on early errors 
F/3298
 2026-04-29 11:22:07 +02:00
David Garske 0baae6b318 Added boot benchmark support to update_flash.c. 2026-04-28 14:58:42 +02:00
Brett Nicholas c45268ed7f monolithic self-updates: force DISABLE_BACKUP=1, eliminate swap, eliminate update code 2026-04-17 08:27:05 +02:00
Daniele Lacamera 776378ca78 Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
Daniele Lacamera 6540f17ef2 Fixed more comments from copilot + fenrir 2026-04-14 20:00:41 +02:00
Daniele Lacamera a64fa8fbcf Addressed Fenrir's review comments + fixed more regressions 2026-04-14 17:59:30 +02:00
Daniele Lacamera b007463103 Addressed copilot comments 2026-04-14 17:11:15 +02:00
Daniele Lacamera 9ac6b1f485 Fixed more regressions 2026-04-14 16:47:11 +02:00
Daniele Lacamera faebb62115 Fixed test regressions 2026-04-14 16:24:53 +02:00
Daniele Lacamera 2bd6274022 Fix endian handling for delta TLV consumers 
F/2581
 2026-04-14 14:09:59 +02:00
Daniele Lacamera 6ce320ef1b fix inverted emergency update branch hint 
F/2572
 2026-04-14 07:57:09 +02:00
Daniele Lacamera 5cb0cb55b9 update: fix invalid size log 
F/2273
 2026-04-10 21:33:21 +02:00
Daniele Lacamera c1b2c40a40 image: restore ct compare contract 
Make image_CT_compare return 0 on match again and update RSA hash checks plus delta base-hash validation to use the original semantics.

F/CI
 2026-04-10 21:22:26 +02:00
Daniele Lacamera 0d6ad205d7 tpm: localize constant compare again 
Restore wolfBoot_constant_compare to TPM-local code and use file-local helpers in update_flash and AHCI instead of a shared cross-module symbol.

F/CI
 2026-04-10 06:17:41 +02:00
Daniele Lacamera 0a8a40f8e0 sign: normalize short read failures 
Return a consistent failure code on encrypt-key short reads and initialize final-swap ret to 0.

F/CI
 2026-04-10 06:01:17 +02:00
Daniele Lacamera e43cdd7d87 update: keep zeroize helper available 
Make wolfBoot_zeroize unconditional in update_flash.c so the common final-swap scrub compiles in non-encrypted builds.

F/CI
 2026-04-10 05:52:31 +02:00
Daniele Lacamera 884249316b update: always scrub final swap buffer 
Ensure tmpBuffer is zeroized on the common exit path in wolfBoot_swap_and_final_erase, not only in EXT_ENCRYPTED builds.

F/CI
 2026-04-10 05:47:06 +02:00
Daniele Lacamera ee9f21c5f8 update: propagate encrypt key read errors 2026-04-10 05:36:53 +02:00
Daniele Lacamera 642def1461 Fix C89 decl-after-statement 2026-04-10 05:29:54 +02:00
Daniele Lacamera a5ef464731 update: fix warning-only build regressions 2026-04-09 16:45:07 +02:00
Daniele Lacamera 4c704a9440 boot: fail closed on flash protect errors 2026-04-09 16:36:38 +02:00
Daniele Lacamera d78c625a87 update: propagate encrypt key persist errors 2026-04-09 14:58:39 +02:00
Daniele Lacamera fc9e7a3e8a Use constant-time delta base hash compare 
F/2253
 2026-04-08 19:53:50 +02:00
Daniele Lacamera e855c591db zeroize swap trailer key buffer 
F/1890
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 04cc957d6f zeroize update key material 
F/1888
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 35142e6945 Fix total size type in update flash 
F/2269
 2026-04-08 19:53:50 +02:00
Daniele Lacamera e4e96ad2fa Reject valid zero-size delta images 
F/2268
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 1528bc8d99 Use constant-time TPM secret checks 
F/2248
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 44c5b4ab0a Protect bootloader before application boot 
F/2255
 2026-04-08 19:53:50 +02:00
David Garske 51d9c68578
Merge pull request #689 from miyazakh/ram_function_ccrx 
[Renesas RX72N CCRX] Move flash functions to RAM for flash operation
 2026-03-23 13:03:14 -07:00
Daniele Lacamera 805b16e29c remove TPM secret debug logging 
F/1103
 2026-03-22 10:07:27 +01:00
Hideki Miyazaki 285063dc2d Move functions to RAM for flash operation 
- Remove standard library as much as possible
 - Do not use memcpy before it is relocated to RAM.
 - Prefer library functions over RX intrinsics.( Compiler option change)
 2026-03-21 05:52:57 +09:00
Mattia Moffa fcf72e008c Remove NO_DIRECT_READ_OF_ERASED_SECTOR option; write after erase instead 2026-03-18 11:53:26 +01:00
Thomas Cook 3ef8c60242 Fix XMEMSET's per correct erased byte polarity. 2026-03-18 11:53:26 +01:00
Thomas Cook 29734141a3 Fix bug due to uninitialized update partition state variable. 2026-03-18 11:53:26 +01:00
Thomas Cook dd4312679b Deploy NO_DIRECT_READ_OF_ERASED_SECTOR to protect against hardfault with AHB read of erased sector. 2026-03-18 11:53:26 +01:00
Daniele Lacamera f7967fc535 wolfBoot_unseal_auth(): secretSz is now in/out param 
The caller is now required to pass the available space in buffer.
The actual size of the unsealed secret is returned.

F/442
 2026-03-12 09:28:51 +01:00
Daniele Lacamera 4eca085b54 Added USE_CLANG option to Makefile 2026-03-10 15:49:45 +01:00
Daniele Lacamera 19d562dbde Fixed build errors with cross-clang compiler 2026-03-10 15:49:39 +01:00
Daniele Lacamera 8e5aec2c01 Fixed regressions in CI tests 2026-03-09 16:43:45 +01:00
Daniele Lacamera 64a355a0d8 restore label for EXT_FLASH configurations 2026-03-09 15:14:31 +01:00
Daniele Lacamera ab48f051b4 Fixed build error 2026-03-09 15:01:50 +01:00
Daniele Lacamera e4b12e4a97 Remove/ForceZeor secrets from stack after use 
F/445
 2026-03-09 11:16:17 +01:00
Brett Nicholas 04e1e063a2 Fix self-update erase before write in boot partition, add monolithic build option 2026-03-06 17:05:45 +01:00
Brett Nicholas 3f18028e13 add build option to skip verification of boot image 2026-03-06 17:05:45 +01:00
Brett Nicholas 2924646695 Add generic hook framework with provision for pre-init, post-init, and 
boot hooks
 2026-03-05 10:14:04 +01:00
David Garske cbaa132588 Fix for tools/scripts/va416x0/build_test.sh portability (MacOS) 
Added option to support wolfCrypt test/benchmark in test-app
Add some checking if partition size is too large
 2026-03-03 12:29:09 +01:00
Brett Nicholas 4d31ef5502 Add self-header feature with support for sim and AURIX TC3xx 2026-02-27 11:39:51 +01:00