Repository navigation

Harden fwTPM command processing - #629

Merged

dgarske merged 57 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-14018-15838

Oct 16, 2026

Merged

Harden fwTPM command processing#629
dgarske merged 57 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-14018-15838

Commits on Oct 16, 2026
- F-14018 - Make Clear seed replacement atomic
  aidangarske
  committed
  d1ac90a
- F-14020 - Roll back failed global write lock
  aidangarske
  committed
  92f42c7
- F-14021 - Propagate session crypto failures
  aidangarske
  committed
  e42d9d4
- F-14022 - Preserve small-stack allocation errors
  aidangarske
  committed
  baf23de
- F-14025 - Reject truncated NV SetBits commands
  aidangarske
  committed
  cb446bd
- F-14069 - Validate special NV index sizes
  aidangarske
  committed
  e37a8a7
- F-14075 - Reject truncated policy buffers
  aidangarske
  committed
  7a93108
- F-14407 - Preserve WRITE_STCLEAR write access
  aidangarske
  committed
  7871436
- F-14408 - Validate PolicySigned nonce input
  aidangarske
  committed
  e1efef9
- F-14409 - Reject unknown PolicySigned handles
  aidangarske
  committed
  2251206
- F-14410 - Preserve PCR values across Clear
  aidangarske
  committed
  dac8d7c
- F-14411 - Reset Clear-owned TPM state
  aidangarske
  committed
  b03dab2
- F-14412 - Track orderly startup state
  aidangarske
  committed
  1d9132b
- F-14413 - Reject duplicate restored session handles
  aidangarske
  committed
  4bcdacb
- F-14414 - Honor keyed hash HMAC schemes
  aidangarske
  committed
  54b68ea
- F-14415 - Implement multi-bank event sequences
  aidangarske
  committed
  8af0661
- F-14416 - Preserve RSA OAEP labels
  aidangarske
  committed
  9b26308
- F-14417 - Preserve loaded object authorization
  aidangarske
  committed
  908d0fb
- F-14432 - Reject unsupported policy expiration
  aidangarske
  committed
  5aac3cc
- F-14682 - Release saved sessions on flush
  aidangarske
  committed
  18cbe97
- F-14683 - Preserve the NV counter high-water mark
  aidangarske
  committed
  72f7653
- F-14685 - Validate objects before persistence
  aidangarske
  committed
  4b6b564
- F-14696 - Require CertifyCreation tickets
  aidangarske
  committed
  63ef0d2
- F-14697 - Reject fixed imported objects
  aidangarske
  committed
  ce2388e
- F-14698 - Reject unsupported PIN NV indices
  aidangarske
  committed
  4ecda22
- F-15704 - Exclude bound auth from session HMACs
  aidangarske
  committed
  52e157b
- F-15705 - Limit PCR read digest lists
  aidangarske
  committed
  00cbd87
- F-15706 - Honor allocated PCR event banks
  aidangarske
  committed
  7e35a98
- F-15707 - Bound dictionary attack thresholds
  aidangarske
  committed
  6d5b55c
- F-15708 - Propagate NV extend hash failures
  aidangarske
  committed
  865b8ae
- F-15814 - Bound StartAuthSession caller nonces
  aidangarske
  committed
  51d5014
- F-15815 - Validate session symmetric definitions
  aidangarske
  committed
  0e80f4a
- F-15816 - Normalize salted session errors
  aidangarske
  committed
  31be0d0
- F-15817 - Validate HMAC key selection
  aidangarske
  committed
  517d163
- F-15818 - Reject restricted HMAC sequences
  aidangarske
  committed
  6b1cd49
- F-15819 - Reject unsupported cipher modes
  aidangarske
  committed
  a4de8c1
- F-15820 - Enforce symmetric command constraints
  aidangarske
  committed
  4424cd2
- F-15821 - Bound TPM property groups
  aidangarske
  committed
  0b0c6c5
- F-15822 - Report command NV attributes
  aidangarske
  committed
  9b0c015
- F-15823 - Reset platform authorization on startup
  aidangarske
  committed
  781cba5
- F-15824 - Flush transient state on every startup
  aidangarske
  committed
  176404e
- F-15825 - Correct ClockSet upper bound
  aidangarske
  committed
  ba01809
- F-15826 - Correct invalid provision handle errors
  aidangarske
  committed
  0e0ab33
- F-15827 - Validate hash ticket hierarchies
  aidangarske
  committed
  3b01d44
- F-15828 - Preserve sequences after failed completion
  aidangarske
  committed
  00464e4
- F-15829 - Reject sessions on context commands
  aidangarske
  committed
  0293f9b
- F-15830 - Return indexed handle reference errors
  aidangarske
  committed
  bc1cb46
- F-15831 - Gate pre-startup capability queries
  aidangarske
  committed
  ad83c3a
- F-15832 - Enforce PolicySigned expiration
  aidangarske
  committed
  8c1b7f0
- F-15833 - Validate policy locality ranges
  aidangarske
  committed
  8fae4f2
- F-15834 - Reject unsupported policy command codes
  aidangarske
  committed
  4496410
- F-15836 - Validate created object attributes
  aidangarske
  committed
  837c1b0
- F-15837 - Obfuscate attestation metadata
  aidangarske
  committed
  1782ced
- F-15838 - Limit StirRandom input size
  aidangarske
  committed
  d3c5187
- F-15835 - Validate PCR selection sizes
  aidangarske
  committed
  f12078f
- Rebase policy timeouts across Clear
  aidangarske
  committed
  2272ac6
- Address PR 629 review
  aidangarske
  committed
  334c6d0

Commits

Commits on Oct 16, 2026