Skip to content

Fenrir fixes batch 13#512

Merged
dgarske merged 22 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-13
May 26, 2026
Merged

Fenrir fixes batch 13#512
dgarske merged 22 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-13

Conversation

@aidangarske
Copy link
Copy Markdown
Member

@aidangarske aidangarske commented May 26, 2026 

F-4157, F-4622, F-4623, F-4743, F-4674, F-4377, F-4744, F-4745, F-4746, F-4747, F-4750, F-4749, F-4748, F-4376, F-4379, F-4378, F-4160, F-4680

aidangarske added 18 commits May 26, 2026 12:13
@aidangarske
F-4157 — Fix native_test hash check using && instead of ||
fa616ac
@aidangarske
F-4622 — Pass full hex length to hexToByte in policy.c -digest=
5477be2
@aidangarske
F-4623 — Reject st33_fw_update blob_len > 2048 before XMEMCPY
bcb3f57
@aidangarske
F-4743 — Guard mod_len in TPM2_ASN_DecodeRsaPubKey to prevent underflow
6c1b690
@aidangarske
F-4674 — Reject NV journal nvPublic.dataSize > FWTPM_MAX_NV_DATA
17e4cbc
@aidangarske
F-4377 — Reject NULL-hierarchy ticket in FwCmd_PolicyAuthorize
c1f7032
@aidangarske
F-4744 — Reject zero-digest creation ticket in FwCmd_CertifyCreation
75216a3
@aidangarske
F-4745 — Look up ctx->pcrAuth in FwLookupEntityAuth for PCR handles
a8d7c84
@aidangarske
F-4746 — Reject out-of-range persistentHandle in FwCmd_EvictControl
566faa5
@aidangarske
F-4747 — Reject persistent objectHandle in EvictControl make-persiste…
f1117a6 
…nt path
@aidangarske
F-4750 — Enforce authPolicy.size matches hashAlg in FwCmd_SetPrimaryP…
b3ca027 
…olicy
@aidangarske
F-4749 — Reject NV authPolicy.size that does not match nameAlg digest
f27c3b1
@aidangarske
F-4748 — Discard NV hierarchy policy with size != alg digest
eb87236
@aidangarske
F-4376 — Reject policy session with empty HMAC when entity authPolicy…
2bd2f89 
… is empty
@aidangarske
F-4379 — Check mp_div remainder in FwCmd_LoadExternal RSA path
f23e794
@aidangarske
F-4378 — Enforce per-PCR locality table in FwCmd_PCR_Reset
6914245
@aidangarske
F-4160 — Return BUFFER_E for oversized auth in wolfTPM2_CreateKeySeal_ex
2ac2f41
@aidangarske
F-4680 — Reject wire respSz exceeding physical buffer in TPM2_Packet_…
b33569e 
…Parse
Copilot AI review requested due to automatic review settings May 26, 2026 19:38
@aidangarske aidangarske self-assigned this May 26, 2026

This comment was marked as resolved.

Sign in to view

@aidangarske aidangarske requested a review from dgarske May 26, 2026 22:55
@dgarske dgarske merged commit 4733a85 into wolfSSL:master May 26, 2026
142 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@dgarske dgarske dgarske approved these changes

Assignees

@aidangarske aidangarske

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@aidangarske @dgarske