Skip to content

Strengthen TPM input validation and memory handling - #565

Draft
aidangarske wants to merge 21 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7585-7605
Draft

Strengthen TPM input validation and memory handling#565
aidangarske wants to merge 21 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7585-7605

Conversation

@aidangarske

@aidangarske aidangarske commented Aug 6, 2026

Copy link
Copy Markdown
Member 
F-7585, F-7596, F-7586, F-7587, F-7602, F-7589, F-7594, F-7595, F-7588, F-7590, F-7591, F-7592, F-7597, F-7598,
F-7601, F-7603, F-7604, F-7593, F-7599, F-7600, F-7605

@aidangarske
F-7585 - Parse policy_sign -pcrdigest= hex result in a signed temporary
dc655b6
@aidangarske
F-7596 - Compare pcrDigestSz against remaining buffer capacity
6c3c356
@aidangarske
F-7586 - Keep EK cert verify result out of the example return code
394dce3
@aidangarske
F-7587 - Define TPM_SPI_PIN in the Microchip chip select fallback
2e32fca
@aidangarske
F-7602 - Zeroize HAL I2C write staging buffers
db418eb
@aidangarske
F-7589 - Check I2C busy timeout in Microchip read data and write loops
6833067
@aidangarske
F-7594 - Compare PolicyNV operands in constant time
e514706
@aidangarske
F-7595 - Compare PolicyCounterTimer operands in constant time
790a288
@aidangarske
F-7588 - Reject transcript growth without 32-bit addition wraparound
3ab9027
@aidangarske
F-7590 - Reserve the NUL terminator when clamping -secrethex= input
cc7cb89
@aidangarske
F-7591 - Cap PCR selection count to the entries actually parsed
3f8c84d
@aidangarske
F-7592 - Check BuildPolicyCommandCode status for each policy digest
62427d8
@aidangarske
F-7597 - Clamp shared memory rsp_len to the TIS response FIFO size
d17fb78
@aidangarske
F-7598 - Validate manifest hash size before staging FieldUpgradeStart
d3a61f2
@aidangarske
F-7601 - Zeroize ML-DSA sign and verify sequence input structs
28626aa
@aidangarske
F-7603 - Zeroize crypto callback hash cache before freeing
edcb845
@aidangarske
F-7604 - Zeroize response authentication temporaries in TPM2_Response…
395dc2b 
…Process
@aidangarske
F-7593 - Check GetNvAttributesTemplate status before modifying attrib…
099de0e 
…utes
@aidangarske
F-7599 - Reject authenticated SPDM records shorter than the length field
f86b78d
@aidangarske
F-7600 - Terminate CSR subject components and clear stale bytes
954cd33
@aidangarske
F-7605 - Zeroize hash context in PCRGetDigest and PolicyHash
1401945
@aidangarske
aidangarske requested review from wolfSSL-Fenrir-bot and a lite review from Copilot August 6, 2026 20:11
Copilot AI reviewed Aug 6, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot Awaiting requested review from wolfSSL-Fenrir-bot

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@aidangarske