Fenrir fixes batch 12#511

Merged

dgarske merged 8 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-12

May 27, 2026

Commits on May 27, 2026

F-4373 — TPM2_Clear unauthenticated wipe via TPM_ST_NO_SESSIONS bypass
aidangarske
committed
F-4374 — PolicyTicket zero-digest bypass forges PolicySigned extension
aidangarske
committed
F-4375 — LoadExternal SYMCIPHER OOB write via dead bounds check
aidangarske
committed
F-4742 — PolicyAuthorize zero-ticket bypass forges policyDigest chain
aidangarske
committed
F-4170 + F-4171 — Fix TPMT_HA HMAC arm wire marshaling on sign and verify
aidangarske
committed
F-4742 — Revert zero-digest reject; NULL ticket is spec-compliant per Part 2 Sec.10.6.5
aidangarske
committed
F-4171 — Bounds-check cmd before parsing hmacHash in VerifySequenceComplete
aidangarske
committed
Replace em-dashes with hyphens in comments per review
aidangarske
committed