wolfBoot/src
Daniele Lacamera 194322ec73 F-12921: erase keyvault payload on object removal
The PKCS#11 and PSA store Remove paths invalidated the metadata and
freed the bitmap slot but left the payload in flash, so removed keys
stayed recoverable by a physical reader. Both Remove paths now call
erase_object_payload() before invalidating the metadata; the existing
sector read-modify-write preserves neighboring slots. Raw-flash
deletion tests added to both unit suites.
2026-09-07 14:36:29 +02:00
..
dice
x86
arm_tee_psa_ipc.c
arm_tee_psa_veneer.c
boot_aarch64.c fdt: rewrite device tree parser with capacity bound and full validation 2026-09-02 10:48:52 +02:00
boot_aarch64_efi.c
boot_aarch64_start.S
boot_arm.c
boot_arm32.c
boot_arm32_start.S
boot_c2000.c c2000: add wolfBoot TI C28x (TMS320F28P550SJ) secure-boot XIP port 2026-08-25 00:01:33 +02:00
boot_ppc.c fdt: rewrite device tree parser with capacity bound and full validation 2026-09-02 10:48:52 +02:00
boot_ppc_mp.S
boot_ppc_start.S
boot_renesas.c
boot_renesas_start.S
boot_riscv.c fdt: rewrite device tree parser with capacity bound and full validation 2026-09-02 10:48:52 +02:00
boot_riscv_start.S
boot_x86_64.c F-9746: x86_64_efi: fix do_boot prototype mismatch, drop unused param 2026-09-04 10:57:08 +02:00
boot_x86_fsp.c F-7390: x86 fsp: drop dead FSP auth scaffolding, fix comment 2026-09-04 10:00:54 +02:00
boot_x86_fsp_payload.c
boot_x86_fsp_start.S
clang_sections.S
ddr_cadence.c
delta.c
disk.c disk_fs: add read-only FAT32 filesystem support for disk boot 2026-09-02 10:47:33 +02:00
disk_fs.c disk_fs: add read-only FAT32 filesystem support for disk boot 2026-09-02 10:47:33 +02:00
elf.c F-11027: abort the ELF load when an mmu_cb mapping fails 2026-08-25 08:51:09 +02:00
ext4.c ext4: add read-only extent-based ext4 filesystem support 2026-09-02 10:47:33 +02:00
fat32.c disk_fs: add read-only FAT32 filesystem support for disk boot 2026-09-02 10:47:33 +02:00
fdt.c fdt: rewrite device tree parser with capacity bound and full validation 2026-09-02 10:48:52 +02:00
flash_otp_keystore.c
fwtpm_callable.c F-11044: stage the fwTPM command in secure memory before processing 2026-08-25 08:51:09 +02:00
gpt.c gpt: parse MBR and GPT byte-wise so disk boot works big-endian 2026-09-02 10:47:33 +02:00
gzip.c
image.c image: cast ELF scatter log fields to unsigned long 2026-09-04 20:02:10 +02:00
libwolfboot.c F-12114: pkcs11: wipe the PIN even when no session was established 2026-09-02 12:15:51 +02:00
loader.c
multiboot.c F-12060: multiboot2: terminate the boot info tag list with an end tag 2026-09-02 12:15:51 +02:00
pci.c F-12066: pci: restore original COMMAND and clear windows on bridge error 2026-09-02 12:15:51 +02:00
pkcs11_callable.c F-12107: pkcs11 nsc: zero work buffer before it can be freed 2026-09-04 14:53:15 +02:00
pkcs11_store.c F-12921: erase keyvault payload on object removal 2026-09-07 14:36:29 +02:00
psa_store.c F-12921: erase keyvault payload on object removal 2026-09-07 14:36:29 +02:00
qspi_flash.c
riscv_sbi.c F-11029: publish IPI fence completion only after the fence executes 2026-08-25 08:51:09 +02:00
sdhci.c F-11032: bound the ACMD41 OCR readiness poll in SD card init 2026-08-26 17:41:22 +02:00
spi_flash.c
stage2_params.c
store_sbrk.c
store_sbrk.h
string.c c2000: add wolfBoot TI C28x (TMS320F28P550SJ) secure-boot XIP port 2026-08-25 00:01:33 +02:00
tpm.c F-12105: tpm: keep keystore size as int in load_pubkey 2026-09-04 14:06:33 +02:00
uart_flash.c
ubootenv.c Peer review fixes (thanks Daniele) 2026-08-24 12:47:34 +02:00
update_disk.c F-9740: update_disk: FSP low-mem rejection falls back to other slot 2026-09-04 10:32:13 +02:00
update_flash.c Address minor PR 882 review nits 2026-09-04 16:39:26 +02:00
update_flash_hwswap.c F-12114: pkcs11: wipe the login PIN on all pre-handoff paths 2026-09-02 12:15:51 +02:00
update_ram.c F-12065: update_ram: type-safe short-read check for -Wsign-compare 2026-09-02 18:21:54 +02:00
vector_riscv.S
wc_callable.c
wolfhsm_callable.c
wolfhsm_flash_hal.c
xmalloc.c