wolfBoot/src
Daniele Lacamera f0e2c49150 F-13656: bound e_phentsize to the program-header struct size
An undersized e_phentsize made the last program-header loop iteration
read past the validated table (and past the image buffer when the
table ends at the image end). Reject such images with -3.

Verification: tools/unit-tests/unit-elf-phentsize fails pre-fix
(undersized ELF accepted, ret=0), passes post-fix (2/2); full
make -C tools/unit-tests run green.
2026-09-24 02:44:03 +02:00
..
dice Add wolfCOSE DICE attestation 2026-08-06 09:44:52 +02:00
x86 Guard security_command_passphrase against in-flight async DMA 2026-09-16 19:53:59 +02:00
arm_tee_psa_ipc.c F-6765: scrub previous value before overwriting PSA storage 2026-09-15 15:35:10 +02:00
arm_tee_psa_veneer.c
…
boot_aarch64.c versal: report EL2 exceptions, fix FIT ramdisk fixup and the EL2->EL1 cache handoff 2026-09-10 08:17:21 +02:00
boot_aarch64_efi.c Add aarch64_efi target: wolfBoot as an AArch64 UEFI application 2026-08-10 21:03:50 +02:00
boot_aarch64_start.S Add NXP i.MX 8QuadMax MEK port including BL33 support 2026-09-21 18:07:44 +02:00
boot_arm.c Add a generic secure application handoff with a measured boot record 2026-09-22 15:35:42 +02:00
boot_arm32.c F-9723: non-MMU handoff clears r0-r3, not all GPRs 2026-09-16 12:14:13 +02:00
boot_arm32_start.S
…
boot_c2000.c c2000: add wolfBoot TI C28x (TMS320F28P550SJ) secure-boot XIP port 2026-08-25 00:01:33 +02:00
boot_ppc.c fdt: rewrite device tree parser with capacity bound and full validation 2026-09-02 10:48:52 +02:00
boot_ppc_mp.S
…
boot_ppc_start.S
…
boot_renesas.c
…
boot_renesas_start.S
…
boot_riscv.c fdt: rewrite device tree parser with capacity bound and full validation 2026-09-02 10:48:52 +02:00
boot_riscv_start.S RISC-V: minimal SBI runtime; PolarFire SoC boots 4-CPU SMP Yocto Linux 2026-08-03 12:27:22 +02:00
boot_x86_64.c F-9746: x86_64_efi: fix do_boot prototype mismatch, drop unused param 2026-09-04 10:57:08 +02:00
boot_x86_fsp.c F-12890: change_stack_and_invoke has no callback arg 2026-09-16 12:14:13 +02:00
boot_x86_fsp_payload.c
…
boot_x86_fsp_start.S
…
clang_sections.S
…
ddr_cadence.c PolarFire SoC: LPDDR4 DDR init for MPFS250T Video Kit (M-Mode) 2026-08-03 12:27:22 +02:00
delta.c
…
disk.c F-7972: disk_open_mbr: return -1 when no usable partition 2026-09-23 02:46:16 +02:00
disk_fs.c disk_fs: add read-only FAT32 filesystem support for disk boot 2026-09-02 10:47:33 +02:00
elf.c F-13656: bound e_phentsize to the program-header struct size 2026-09-24 02:44:03 +02:00
ext4.c ext4: add read-only extent-based ext4 filesystem support 2026-09-02 10:47:33 +02:00
fat32.c disk_fs: add read-only FAT32 filesystem support for disk boot 2026-09-02 10:47:33 +02:00
fdt.c hooks: add pre-boot hook, DTB accessor and FDT alias/reg helpers 2026-09-21 18:10:09 +02:00
flash_otp_keystore.c
…
fwtpm_callable.c F-11044: stage the fwTPM command in secure memory before processing 2026-08-25 08:51:09 +02:00
gpt.c gpt: parse MBR and GPT byte-wise so disk boot works big-endian 2026-09-02 10:47:33 +02:00
gzip.c
…
image.c F-14133: drop the dead entry_out_set guard in the ELF check 2026-09-24 02:33:47 +02:00
libwolfboot.c Fix: keep wolfBoot API declarations visible to app builds 2026-09-16 18:31:59 +02:00
loader.c Peer review fixes (thanks Jack) 2026-08-24 12:47:34 +02:00
multiboot.c F-12060: multiboot2: terminate the boot info tag list with an end tag 2026-09-02 12:15:51 +02:00
pci.c F-12066: pci: restore original COMMAND and clear windows on bridge error 2026-09-02 12:15:51 +02:00
pkcs11_callable.c pkcs11 store: batch sector commits to Store_Close 2026-09-10 09:40:02 +02:00
pkcs11_store.c pkcs11 store: invalidate the flash read cache after every commit 2026-09-10 10:45:55 +02:00
psa_store.c F-12921: erase keyvault payload on object removal 2026-09-07 14:36:29 +02:00
qspi_flash.c F-7973: qspi test_ext_flash: return -1, not -i, on mismatch 2026-09-23 02:46:16 +02:00
riscv_sbi.c F-12876: riscv_sbi: report remote-fence timeout as SBI error 2026-09-07 14:54:57 +02:00
sdhci.c F-14138: fix the DTCV base comment (2^13, not 2*13) 2026-09-24 02:33:47 +02:00
spi_flash.c
…
stage2_params.c
…
store_sbrk.c
…
store_sbrk.h
…
string.c c2000: add wolfBoot TI C28x (TMS320F28P550SJ) secure-boot XIP port 2026-08-25 00:01:33 +02:00
tpm.c F-12943: zeroize the policy session in seal/unseal blob cleanup 2026-09-23 04:30:26 +02:00
uart_flash.c F-7064: give the erase-completion ACK its long timeout 2026-09-23 01:48:54 +02:00
ubootenv.c Peer review fixes (thanks Daniele) 2026-08-24 12:47:34 +02:00
update_disk.c F-13660: zeroize the nonce-derived IV copy in disk_crypto_set_iv 2026-09-23 03:26:31 +02:00
update_flash.c Add a generic secure application handoff with a measured boot record 2026-09-22 15:35:42 +02:00
update_flash_hwswap.c hooks: add pre-boot hook, DTB accessor and FDT alias/reg helpers 2026-09-21 18:10:09 +02:00
update_ram.c hooks: add pre-boot hook, DTB accessor and FDT alias/reg helpers 2026-09-21 18:10:09 +02:00
vector_riscv.S RISC-V: minimal SBI runtime; PolarFire SoC boots 4-CPU SMP Yocto Linux 2026-08-03 12:27:22 +02:00
wc_callable.c
…
wolfhsm_callable.c
…
wolfhsm_flash_hal.c
…
xmalloc.c F-11039: zeroize XFREE'd slots in the static malloc pool 2026-09-23 03:29:14 +02:00