WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
wolfBoot/include
History
Daniele Lacamera 63b58c5491 F-4647: bound strlen to ATA_SECURITY_PASSWORD_LEN in passphrase path 
security_command_passphrase used strlen(passphrase) on a 32-byte binary
buffer from TPM unsealing that carries no null-terminator guarantee,
causing an OOB stack read whenever none of the 32 key bytes is zero.

Replace strlen with strnlen(passphrase, ATA_SECURITY_PASSWORD_LEN) using
a new constant (32, matching the ATA-8 ACS password field size) defined
in ata.h.  Also add a size check in sata_unlock_disk after
sata_get_unlock_secret so a short or malformed unseal result is rejected
before reaching the ATA command path.
 		2026-06-10 21:01:17 +02:00
..
MPLAB Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
wolfboot Add hardware-based DICE on mcxn 2026-05-21 20:49:20 +02:00
x86 F-4647: bound strlen to ATA_SECURITY_PASSWORD_LEN in passphrase path 2026-06-10 21:01:17 +02:00
delta.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
disk.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
elf.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
encrypt.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
fdt.h Add wolfBoot FIT support for loading bitstream 2026-06-09 15:30:27 +02:00
gpt.h F-4715: bound GPT partition-entry array size before CRC scan in disk_open 2026-06-10 21:01:16 +02:00
gzip.h Fixes from peer review (Thank you Daniele and Marco) 2026-05-05 10:16:16 +02:00
hal.h Add wolfBoot FIT support for loading bitstream 2026-06-09 15:30:27 +02:00
hal_fpga.h Add wolfBoot FIT support for loading bitstream 2026-06-09 15:30:27 +02:00
hooks.h
…
image.h unify rsa and rsa-pss into single verify method 2026-04-28 15:02:57 +02:00
keystore.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
loader.h rename aggregate RSA PSS macro, add Renesas protection 2026-04-28 15:02:57 +02:00
multiboot.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
otp_keystore.h Fix initialization of string in otp_keystore tag (fix build error) 2026-05-06 10:22:59 +02:00
pci.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
printf.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
sdhci.h Peer review fixes + ZynqMP robustness improvements 2026-04-28 14:55:06 +02:00
spi_drv.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
spi_flash.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
stage2_params.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
target.h.in Add wolfBoot FIT support for loading bitstream 2026-06-09 15:30:27 +02:00
tpm.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
uart_drv.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
uart_flash.h Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
user_settings.h remove pem to der define to reduce image size 2026-06-05 10:44:30 -06:00