Fenrir fixes batch 13#512

Merged

dgarske merged 22 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-13

May 26, 2026

Commits on May 26, 2026

F-4157 — Fix native_test hash check using && instead of ||
aidangarske
committed
F-4622 — Pass full hex length to hexToByte in policy.c -digest=
aidangarske
committed
F-4623 — Reject st33_fw_update blob_len > 2048 before XMEMCPY
aidangarske
committed
F-4743 — Guard mod_len in TPM2_ASN_DecodeRsaPubKey to prevent underflow
aidangarske
committed
F-4674 — Reject NV journal nvPublic.dataSize > FWTPM_MAX_NV_DATA
aidangarske
committed
F-4377 — Reject NULL-hierarchy ticket in FwCmd_PolicyAuthorize
aidangarske
committed
F-4744 — Reject zero-digest creation ticket in FwCmd_CertifyCreation
aidangarske
committed
F-4745 — Look up ctx->pcrAuth in FwLookupEntityAuth for PCR handles
aidangarske
committed
F-4746 — Reject out-of-range persistentHandle in FwCmd_EvictControl
aidangarske
committed
F-4747 — Reject persistent objectHandle in EvictControl make-persistent path
aidangarske
committed
F-4750 — Enforce authPolicy.size matches hashAlg in FwCmd_SetPrimaryPolicy
aidangarske
committed
F-4749 — Reject NV authPolicy.size that does not match nameAlg digest
aidangarske
committed
F-4748 — Discard NV hierarchy policy with size != alg digest
aidangarske
committed
F-4376 — Reject policy session with empty HMAC when entity authPolicy is empty
aidangarske
committed
F-4379 — Check mp_div remainder in FwCmd_LoadExternal RSA path
aidangarske
committed
F-4378 — Enforce per-PCR locality table in FwCmd_PCR_Reset
aidangarske
committed
F-4160 — Return BUFFER_E for oversized auth in wolfTPM2_CreateKeySeal_ex
aidangarske
committed
F-4680 — Reject wire respSz exceeding physical buffer in TPM2_Packet_Parse
aidangarske
committed
F-4745 — Fix type-limits warning on unsigned handle >= PCR_FIRST
aidangarske
committed
F-4377 — Revert NULL-hierarchy reject; NULL tickets are spec-compliant
aidangarske
committed
F-4379 — Call mp_clear on rem after mp_forcezero
aidangarske
committed
F-4622 — Reject odd-length -digest= argument before hexToByte
aidangarske
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fenrir fixes batch 13#512

Fenrir fixes batch 13#512
dgarske merged 22 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-13

Commits on May 26, 2026

F-4157 — Fix native_test hash check using && instead of ||

F-4622 — Pass full hex length to hexToByte in policy.c -digest=

F-4623 — Reject st33_fw_update blob_len > 2048 before XMEMCPY

F-4743 — Guard mod_len in TPM2_ASN_DecodeRsaPubKey to prevent underflow

F-4674 — Reject NV journal nvPublic.dataSize > FWTPM_MAX_NV_DATA

F-4377 — Reject NULL-hierarchy ticket in FwCmd_PolicyAuthorize

F-4744 — Reject zero-digest creation ticket in FwCmd_CertifyCreation

F-4745 — Look up ctx->pcrAuth in FwLookupEntityAuth for PCR handles

F-4746 — Reject out-of-range persistentHandle in FwCmd_EvictControl

F-4747 — Reject persistent objectHandle in EvictControl make-persistent path

F-4750 — Enforce authPolicy.size matches hashAlg in FwCmd_SetPrimaryPolicy

F-4749 — Reject NV authPolicy.size that does not match nameAlg digest

F-4748 — Discard NV hierarchy policy with size != alg digest

F-4376 — Reject policy session with empty HMAC when entity authPolicy is empty

F-4379 — Check mp_div remainder in FwCmd_LoadExternal RSA path

F-4378 — Enforce per-PCR locality table in FwCmd_PCR_Reset

F-4160 — Return BUFFER_E for oversized auth in wolfTPM2_CreateKeySeal_ex

F-4680 — Reject wire respSz exceeding physical buffer in TPM2_Packet_Parse

F-4745 — Fix type-limits warning on unsigned handle >= PCR_FIRST

F-4377 — Revert NULL-hierarchy reject; NULL tickets are spec-compliant

F-4379 — Call mp_clear on rem after mp_forcezero

F-4622 — Reject odd-length -digest= argument before hexToByte