Commit Graph

2810 Commits (e22eade623cfe1df954ce334afd9dce2baba7fa2)

Author SHA1 Message Date
Daniele Lacamera e22eade623 fix memmove large-length backward copy
F/1897
2026-04-08 19:53:50 +02:00
Daniele Lacamera a5ea3ff829 Reject oversized delta source offsets
F/2267
2026-04-08 19:53:50 +02:00
Daniele Lacamera 153ad2b0af Fix sign header TLV overflow sizing
F/2266
2026-04-08 19:53:50 +02:00
Daniele Lacamera 0bcc49ab3c Strengthen same-version RAM update test
F/2262
2026-04-08 19:53:50 +02:00
Daniele Lacamera 47b61ba2eb Add RAM_CODE self-update unit coverage
F/2261
2026-04-08 19:53:50 +02:00
Daniele Lacamera 30fb32f89f Add auth-only invalid update test
F/2260
2026-04-08 19:53:50 +02:00
Daniele Lacamera 12dd6becc6 Add auth type coverage for unit-image
F/2259
2026-04-08 19:53:50 +02:00
Daniele Lacamera 44c5b4ab0a Protect bootloader before application boot
F/2255
2026-04-08 19:53:50 +02:00
Daniele Lacamera 9715b4df26 Use constant-time RSA hash comparison
F/2247
2026-04-08 19:53:50 +02:00
Daniele Lacamera 2ab04ed382 Check image reopen failures in sign tool
F/1898
2026-04-08 19:53:50 +02:00
Daniele Lacamera c6e7f7966b Fix sign encrypted output open failure
F/1895
2026-04-08 19:53:50 +02:00
Daniele Lacamera 364b9d099b Fix policy_create PCR digest validation
F/1894
2026-04-08 19:51:17 +02:00
Daniele Lacamera de4c33ee44 Propagate erase encrypt key write failures
F/1893
2026-04-08 19:50:11 +02:00
Daniele Lacamera 1442e1c8d0 Propagate encrypt key flash errors
F/1892
2026-04-08 19:50:11 +02:00
Daniele Lacamera 8399e3ed44 Add restricted key mask authenticity tests
F/2258
2026-04-08 15:47:47 +02:00
Daniele Lacamera 32783034ab zero ML-DSA private key buffer
F/2277
2026-04-08 15:43:26 +02:00
Daniele Lacamera 6f40afaedf Zero EdDSA keygen private data
F/2276
2026-04-08 15:42:14 +02:00
Daniele Lacamera 114140c232 Zero ECC keygen private buffers
F/2275
2026-04-08 15:40:48 +02:00
Daniele Lacamera 87d5a7fc9a Scrub RSA keygen private material
F/2274
2026-04-08 15:39:47 +02:00
Daniele Lacamera 1c82453922 sign: scrub key buffers before free
F/2273
2026-04-08 15:38:18 +02:00
David Garske 993b4f42f6
Merge pull request #744 from danielinux/update-submodules-2.8.0
Updated submodules to latest version
2026-04-08 00:43:59 +08:00
Daniele Lacamera c03d251599 Addressed copilot's comment 2026-04-07 15:02:21 +02:00
Daniele Lacamera 201c2c5c7e Adjust BIGINT limits for new wolfSSL ECC+SMALLSTACK 2026-04-07 14:14:44 +02:00
Daniele Lacamera c710fe9078 Fixed xmalloc pools for new wolfSSL ECC+SMALLSTACK 2026-04-07 12:36:30 +02:00
Daniele Lacamera f62dc729eb Updated submodules to latest 2026-04-07 12:07:24 +02:00
Mattia Moffa 084431ba87
Merge pull request #740 from danielinux/fixes-20260330
Fixes 20260330
2026-03-31 14:33:52 +02:00
Daniele Lacamera d7e56d59c7 Address copilot comments 2026-03-31 07:33:48 +02:00
Daniele Lacamera 909fbeb35e (review comment) remove hal_otp.h 2026-03-31 07:20:45 +02:00
Daniele Lacamera 6b6d27de5c PKCS11 test: use pre-provisioned key to make test deterministic 2026-03-31 07:16:54 +02:00
Daniele Lacamera cfbc3f0cfc Up to latest emulator container 2026-03-30 19:19:36 +02:00
Daniele Lacamera 02b88c054f Move variable to its usage block 2026-03-30 16:49:42 +02:00
Brett Nicholas 9debc4c559 Fix XMSS and ML_DSA keygen type mismatch between image headers and keystore by unifying AUTH_KEY_*/KEYGEN_* constants 2026-03-30 16:32:44 +02:00
Marco Oliverio 409901b660 pic32c: remove unused variable 2026-03-30 16:31:57 +02:00
Daniele Lacamera 918e00c781 Rebased, addressed comments 2026-03-30 16:30:27 +02:00
Daniele Lacamera 49106caefc Updated .gitignore: add new unit test binaries 2026-03-30 16:23:16 +02:00
Daniele Lacamera 43b485f239 Validate FDT string offsets
F/1481
2026-03-30 16:23:16 +02:00
Daniele Lacamera 2abf80addd Guard TPM keystore auth in check_rot
F/1482
2026-03-30 16:23:16 +02:00
Daniele Lacamera 0039c8d980 Reject oversized TPM ROT auth input
F/1480
2026-03-30 16:23:16 +02:00
Daniele Lacamera 984ee1f239 Fix store header search bounds
F/1472
2026-03-30 16:23:16 +02:00
Daniele Lacamera ae7d23bf41 Fix stm32h5 OTP readonly block rounding
F/1475
2026-03-30 16:23:16 +02:00
Daniele Lacamera b28a97e784 Fix PKCS11 init state typo
F/1474
2026-03-30 16:23:16 +02:00
Daniele Lacamera 5d0b224e29 Fix SDHCI response bit span check
F/1471
2026-03-30 16:23:16 +02:00
Marco Oliverio 44db8b3cf8
Merge pull request #742 from danielinux/renode-fix-1.15.3
Tag renode version to 1.15.3 (regression in 1.16)
2026-03-30 16:12:01 +02:00
Daniele Lacamera cfed800bd3 Tag renode version to 1.15.3 (regression in 1.16) 2026-03-30 15:47:53 +02:00
David Garske e30ca2dc59
Merge pull request #734 from danielinux/refactoring-ci-workflows
Refactoring CI workflows to run in containers
2026-03-24 08:52:40 -07:00
Daniele Lacamera 47f58ad2f1 Moving trustzone test to, wolfboot-ci-m33mu CI to v1.0 2026-03-24 14:25:18 +01:00
Daniele Lacamera 87c1cb3709 Bump CI v0.9.5 2026-03-24 13:56:36 +01:00
Daniele Lacamera de831c524f Changed efi target type to be more portable 2026-03-24 13:52:51 +01:00
Daniele Lacamera 1a5683cf70 Bump CI v0.9.4 2026-03-24 13:35:01 +01:00
Daniele Lacamera 81c6cf6326 Bump CI -> v0.9.3 2026-03-24 13:10:38 +01:00