wolfBoot/src
Daniele Lacamera 108a33cd54 F-3973: validate in_vec[N].len before dereferencing typed PS IPC pointers
All four PS dispatch arms (PS_SET, PS_GET, PS_GET_INFO, PS_REMOVE) cast
in_vec[N].base to a typed pointer but only checked for NULL, not that
the caller-supplied .len covers the target type.  An NS caller could pass
len=0 (or len < sizeof) with a valid non-NULL base, causing the secure
side to read past the declared buffer.  Mirror the pattern already used
in wolfboot_crypto_dispatch (F-3541) and the attestation handler.
2026-06-11 17:43:09 +02:00
..
dice Add hardware-based DICE on mcxn 2026-05-21 20:49:20 +02:00
x86 Revert misguided secret_size guard in sata_unlock_disk 2026-06-11 00:02:33 +02:00
arm_tee_psa_ipc.c F-3973: validate in_vec[N].len before dereferencing typed PS IPC pointers 2026-06-11 17:43:09 +02:00
arm_tee_psa_veneer.c
boot_aarch64.c
boot_aarch64_start.S
boot_arm.c Reduced footprint of `mpusize()` -> new reduced footprint test limits 2026-06-09 15:52:07 +02:00
boot_arm32.c Add Xilinx Zynq-7000 (ZC702) wolfBoot port 2026-05-12 12:06:05 +02:00
boot_arm32_start.S Add Xilinx Zynq-7000 (ZC702) wolfBoot port 2026-05-12 12:06:05 +02:00
boot_ppc.c
boot_ppc_mp.S
boot_ppc_start.S
boot_renesas.c
boot_renesas_start.S
boot_riscv.c
boot_riscv_start.S
boot_x86_64.c
boot_x86_fsp.c
boot_x86_fsp_payload.c
boot_x86_fsp_start.S
clang_sections.S
delta.c Cap backward delta match length 2026-04-29 11:34:23 +02:00
disk.c F-4714: compute GPT header offset in 64 bits to prevent uint32_t overflow 2026-06-10 21:01:16 +02:00
elf.c F-4418: fix BSS-clear collision guard to use mem_size instead of file_size 2026-06-10 21:01:17 +02:00
fdt.c Handle fdt splice size errors (addressed Mattia's comment) 2026-06-10 21:11:05 +02:00
flash_otp_keystore.c F-4790: clamp OTP pubkey_size in keystore_get_size to prevent OOB read 2026-06-09 15:52:07 +02:00
fwtpm_callable.c F-5092: fix off-by-one in fwtpm_nv_read/write/erase offset guard 2026-06-10 21:01:16 +02:00
gpt.c F-4258: reject GPT partitions whose LBA extent overflows uint64_t 2026-06-10 21:01:16 +02:00
gzip.c Fixes from peer review (Thank you Daniele and Marco) 2026-05-05 10:16:16 +02:00
image.c F-5348: always evaluate keyslot_CT_hint_matches for every slot 2026-06-10 21:01:16 +02:00
libwolfboot.c F-3974: zero ENCRYPT_CACHE stack buffer before return in hal_set_key 2026-06-11 17:37:33 +02:00
loader.c
multiboot.c F-4651: bound multiboot2 header_length to prevent OOB tag walk 2026-06-10 21:01:16 +02:00
pci.c F-4717: reject PCI BARs whose region overruns the pool to prevent cursor wrap 2026-06-10 21:01:16 +02:00
pkcs11_callable.c PKCS#11 NSC veneers: sanitize non-secure pointers 2026-06-09 15:50:14 +02:00
pkcs11_store.c Preserve neighboring store objects on truncate (addressed Fenrir's 2026-06-10 21:34:42 +02:00
psa_store.c Preserve neighboring store objects on truncate (addressed Fenrir's 2026-06-10 21:34:42 +02:00
qspi_flash.c Abort QSPI writes after WE failure 2026-04-29 12:13:40 +02:00
sdhci.c F-4716: reject SDHCI block addresses that overflow 32-bit SD command argument 2026-06-10 21:01:16 +02:00
spi_flash.c
stage2_params.c
store_sbrk.c
store_sbrk.h
string.c
tpm.c Fix test regression, addressed copilot comments 2026-06-05 20:55:52 +02:00
uart_flash.c Return UART flash read error on timeout 2026-04-29 11:20:57 +02:00
update_disk.c Add wolfBoot FIT support for loading bitstream 2026-06-09 15:30:27 +02:00
update_flash.c Add final sanity check after boot hook 2026-04-29 12:20:41 +02:00
update_flash_hwswap.c F-4411: fix uint32_t->int cast bypassing anti-rollback in hwswap wolfBoot_start 2026-06-11 17:05:27 +02:00
update_ram.c F-4410: fix uint32_t->int cast bypassing anti-rollback in update_ram wolfBoot_start 2026-06-11 17:31:35 +02:00
vector_riscv.S
wc_callable.c Fix test regression, addressed copilot comments 2026-06-05 20:55:52 +02:00
xmalloc.c Update wolfssl submodule to latest master 2026-05-18 23:02:54 -07:00