Strengthen TPM input validation and memory handling - #565

Merged

dgarske merged 21 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-7585-7605

Aug 7, 2026

Commits on Aug 6, 2026

F-7585 - Parse policy_sign -pcrdigest= hex result in a signed temporary
aidangarske
committed
dc655b6
F-7596 - Compare pcrDigestSz against remaining buffer capacity
aidangarske
committed
6c3c356
F-7586 - Keep EK cert verify result out of the example return code
aidangarske
committed
394dce3
F-7587 - Define TPM_SPI_PIN in the Microchip chip select fallback
aidangarske
committed
2e32fca
F-7602 - Zeroize HAL I2C write staging buffers
aidangarske
committed
db418eb
F-7589 - Check I2C busy timeout in Microchip read data and write loops
aidangarske
committed
6833067
F-7594 - Compare PolicyNV operands in constant time
aidangarske
committed
e514706
F-7595 - Compare PolicyCounterTimer operands in constant time
aidangarske
committed
790a288
F-7588 - Reject transcript growth without 32-bit addition wraparound
aidangarske
committed
3ab9027
F-7590 - Reserve the NUL terminator when clamping -secrethex= input
aidangarske
committed
cc7cb89
F-7591 - Cap PCR selection count to the entries actually parsed
aidangarske
committed
3f8c84d
F-7592 - Check BuildPolicyCommandCode status for each policy digest
aidangarske
committed
62427d8
F-7597 - Clamp shared memory rsp_len to the TIS response FIFO size
aidangarske
committed
d17fb78
F-7598 - Validate manifest hash size before staging FieldUpgradeStart
aidangarske
committed
d3a61f2
F-7601 - Zeroize ML-DSA sign and verify sequence input structs
aidangarske
committed
28626aa
F-7603 - Zeroize crypto callback hash cache before freeing
aidangarske
committed
edcb845
F-7604 - Zeroize response authentication temporaries in TPM2_ResponseProcess
aidangarske
committed
395dc2b
F-7593 - Check GetNvAttributesTemplate status before modifying attributes
aidangarske
committed
099de0e
F-7599 - Reject authenticated SPDM records shorter than the length field
aidangarske
committed
f86b78d
F-7600 - Terminate CSR subject components and clear stale bytes
aidangarske
committed
954cd33
F-7605 - Zeroize hash context in PCRGetDigest and PolicyHash
aidangarske
committed
1401945

Navigation Menu

Uh oh!

Strengthen TPM input validation and memory handling - #565

Strengthen TPM input validation and memory handling#565
dgarske merged 21 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7585-7605

Commits on Aug 6, 2026

F-7585 - Parse policy_sign -pcrdigest= hex result in a signed temporary

F-7596 - Compare pcrDigestSz against remaining buffer capacity

F-7586 - Keep EK cert verify result out of the example return code

F-7587 - Define TPM_SPI_PIN in the Microchip chip select fallback

F-7602 - Zeroize HAL I2C write staging buffers

F-7589 - Check I2C busy timeout in Microchip read data and write loops

F-7594 - Compare PolicyNV operands in constant time

F-7595 - Compare PolicyCounterTimer operands in constant time

F-7588 - Reject transcript growth without 32-bit addition wraparound

F-7590 - Reserve the NUL terminator when clamping -secrethex= input

F-7591 - Cap PCR selection count to the entries actually parsed

F-7592 - Check BuildPolicyCommandCode status for each policy digest

F-7597 - Clamp shared memory rsp_len to the TIS response FIFO size

F-7598 - Validate manifest hash size before staging FieldUpgradeStart

F-7601 - Zeroize ML-DSA sign and verify sequence input structs

F-7603 - Zeroize crypto callback hash cache before freeing

F-7604 - Zeroize response authentication temporaries in TPM2_ResponseProcess

F-7593 - Check GetNvAttributesTemplate status before modifying attributes

F-7599 - Reject authenticated SPDM records shorter than the length field

F-7600 - Terminate CSR subject components and clear stale bytes

F-7605 - Zeroize hash context in PCRGetDigest and PolicyHash