Skip to content

Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening - #561

Open
aidangarske wants to merge 25 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7263-7285
Open

Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening#561
aidangarske wants to merge 25 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7263-7285

Conversation

@aidangarske

@aidangarske aidangarske commented Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Member 
F-7026, F-7260, F-7261, F-7263, F-7264, F-7265, F-7266, F-7267, F-7268,
F-7269, F-7270, F-7271, F-7272, F-7273, F-7274, F-7275, F-7276, F-7277, 
F-7279, F-7280, F-7281, F-7282, F-7283, F-7284, F-7285

Copilot AI review requested due to automatic review settings July 27, 2026 22:16
Copilot AI reviewed Jul 27, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@aidangarske
aidangarske force-pushed the fenrir-fixes-7263-7285 branch from 566d363 to 36c0023 Compare July 27, 2026 22:31
aidangarske added 16 commits July 27, 2026 15:42
@aidangarske
F-7273 - Reject secured-only vendor commands arriving in SPDM clear f…
69f5764 
…rames
@aidangarske
F-7280 - Zeroize WOLFTPM2_DEV before returning it to the heap
1e4da9e
@aidangarske
F-7279 - Scrub the shared command buffer during TPM2_Cleanup
c95adf0
@aidangarske
F-7265 - Remove dead short-response guard in SPDM swtpm IO callback
f838e7a
@aidangarske
F-7268 - Fail GET_PUBK when the responder public key exceeds the cont…
1744c3f 
…ext buffer
@aidangarske
F-7274 - Guard block round-up against wrap in hash update cache
5ee508c
@aidangarske
F-7267 - Bound the PSS padding block against the caller stack buffer
fd9e3b6
@aidangarske
F-7285 - Scrub the PSS stack hash context after freeing it
ea203cc
@aidangarske
F-7283 - Scrub the NV index auth from the NVCreate compatibility wrapper
c93f90d
@aidangarske
F-7284 - Scrub the hashed input copy in wolfTPM2_HashUpdate
d7b7ebb
@aidangarske
F-7275 - Key GET_PUBK transcript insertion on the parsed vendor code
556f153
@aidangarske
F-7281 - Scrub SPI transfer buffers in the advanced IO callback
8058fdc
@aidangarske
F-7282 - Clear the private blob when the outer wrap fails
d6464b1
@aidangarske
F-7261 - Use a constant-time compare for the bind entity Name test
d210f06
@aidangarske
F-7270 - Return a valid tag from AppendAuth on invalid arguments
ee2a5fd
@aidangarske
F-7260 - Make PKCS#1 v1.5 unpadding branch-free
efd8154
@aidangarske
aidangarske force-pushed the fenrir-fixes-7263-7285 branch from 36c0023 to efd8154 Compare July 27, 2026 22:43
@aidangarske
aidangarske marked this pull request as ready for review July 27, 2026 22:57
@aidangarske
aidangarske requested a review from dgarske July 27, 2026 22:58
@aidangarske aidangarske self-assigned this Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments
@dgarske dgarske Awaiting requested review from dgarske

At least 1 approving review is required to merge this pull request.

Assignees

@dgarske dgarske

@aidangarske aidangarske

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@aidangarske @dgarske