mirror of https://github.com/wolfSSL/wolfBoot.git
00bc8b5823
wolfBoot_find_header() and the sign tool's re-parser checked each field's 4+len against (uint16_t)(header_size - IMAGE_HEADER_OFFSET). For any header of 64 KiB or more the cast wraps (0x10000 -> 0), so the guard rejects every field and an image the tool signs cannot be parsed by the bootloader - a pack/parse roundtrip break, fail-safe but fatal for large TLVs (post-quantum signatures, big cert chains). Compare in the uint32_t domain in both walkers. No shipped config reaches this size yet (largest example is 12288), so this pins the roundtrip for future large-header configs. unit-parser-large-header (new) builds the walker with IMAGE_HEADER_SIZE = 0x10008 - exactly the wrap boundary - and asserts a 300-byte TLV and a 4-byte version field are located (both were rejected pre-fix, proven against the pre-fix walker in a scratch build). |
||
|---|---|---|
| .. | ||
| dice | ||
| x86 | ||
| arm_tee_psa_ipc.c | ||
| arm_tee_psa_veneer.c | ||
| boot_aarch64.c | ||
| boot_aarch64_efi.c | ||
| boot_aarch64_start.S | ||
| boot_arm.c | ||
| boot_arm32.c | ||
| boot_arm32_start.S | ||
| boot_ppc.c | ||
| boot_ppc_mp.S | ||
| boot_ppc_start.S | ||
| boot_renesas.c | ||
| boot_renesas_start.S | ||
| boot_riscv.c | ||
| boot_riscv_start.S | ||
| boot_x86_64.c | ||
| boot_x86_fsp.c | ||
| boot_x86_fsp_payload.c | ||
| boot_x86_fsp_start.S | ||
| clang_sections.S | ||
| ddr_cadence.c | ||
| delta.c | ||
| disk.c | ||
| elf.c | ||
| fdt.c | ||
| flash_otp_keystore.c | ||
| fwtpm_callable.c | ||
| gpt.c | ||
| gzip.c | ||
| image.c | ||
| libwolfboot.c | ||
| loader.c | ||
| multiboot.c | ||
| pci.c | ||
| pkcs11_callable.c | ||
| pkcs11_store.c | ||
| psa_store.c | ||
| qspi_flash.c | ||
| riscv_sbi.c | ||
| sdhci.c | ||
| spi_flash.c | ||
| stage2_params.c | ||
| store_sbrk.c | ||
| store_sbrk.h | ||
| string.c | ||
| tpm.c | ||
| uart_flash.c | ||
| update_disk.c | ||
| update_flash.c | ||
| update_flash_hwswap.c | ||
| update_ram.c | ||
| vector_riscv.S | ||
| wc_callable.c | ||
| wolfhsm_callable.c | ||
| wolfhsm_flash_hal.c | ||
| xmalloc.c | ||