Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening - #561

Open

aidangarske wants to merge 25 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-7263-7285

Commits on Jul 27, 2026

F-7263 - Always start policy session in PCR policy example
aidangarske
committed
F-7272 - Honor caller response buffer capacity in FWTPM_ProcessCommand
aidangarske
committed
F-7277 - Return TPM_RC_TYPE for an unrecognized TestParms public type
aidangarske
committed

Commits on Jul 28, 2026

F-7276 - Validate classical public parameters in TestParms
aidangarske
committed
F-7264 - Mask with RC_MAX_FMT1 when testing for TPM_RC_CURVE
aidangarske
committed
F-7266 - Mask with RC_MAX_FMT1 in bench unsupported-symmetric check
aidangarske
committed
F-7269 - Skip ML-DSA verify when the sign section produced no signature
aidangarske
committed
F-7026 - Set error code when public key buffer allocation fails in quote
aidangarske
committed
F-7271 - Compare NV index type with equality instead of bitwise AND
aidangarske
committed
F-7273 - Reject secured-only vendor commands arriving in SPDM clear frames
aidangarske
committed
F-7280 - Zeroize WOLFTPM2_DEV before returning it to the heap
aidangarske
committed
F-7279 - Scrub the shared command buffer during TPM2_Cleanup
aidangarske
committed
F-7265 - Remove dead short-response guard in SPDM swtpm IO callback
aidangarske
committed
F-7268 - Fail GET_PUBK when the responder public key exceeds the context buffer
aidangarske
committed
F-7274 - Guard block round-up against wrap in hash update cache
aidangarske
committed
F-7267 - Bound the PSS padding block against the caller stack buffer
aidangarske
committed
F-7285 - Scrub the PSS stack hash context after freeing it
aidangarske
committed
F-7283 - Scrub the NV index auth from the NVCreate compatibility wrapper
aidangarske
committed
F-7284 - Scrub the hashed input copy in wolfTPM2_HashUpdate
aidangarske
committed
F-7275 - Key GET_PUBK transcript insertion on the parsed vendor code
aidangarske
committed
F-7281 - Scrub SPI transfer buffers in the advanced IO callback
aidangarske
committed
F-7282 - Clear the private blob when the outer wrap fails
aidangarske
committed
F-7261 - Use a constant-time compare for the bind entity Name test
aidangarske
committed
F-7270 - Return a valid tag from AppendAuth on invalid arguments
aidangarske
committed
F-7260 - Make PKCS#1 v1.5 unpadding branch-free
aidangarske
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening - #561

Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening#561
aidangarske wants to merge 25 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7263-7285

Commits on Jul 27, 2026

F-7263 - Always start policy session in PCR policy example

F-7272 - Honor caller response buffer capacity in FWTPM_ProcessCommand

F-7277 - Return TPM_RC_TYPE for an unrecognized TestParms public type

Commits on Jul 28, 2026

F-7276 - Validate classical public parameters in TestParms

F-7264 - Mask with RC_MAX_FMT1 when testing for TPM_RC_CURVE

F-7266 - Mask with RC_MAX_FMT1 in bench unsupported-symmetric check

F-7269 - Skip ML-DSA verify when the sign section produced no signature

F-7026 - Set error code when public key buffer allocation fails in quote

F-7271 - Compare NV index type with equality instead of bitwise AND

F-7273 - Reject secured-only vendor commands arriving in SPDM clear frames

F-7280 - Zeroize WOLFTPM2_DEV before returning it to the heap

F-7279 - Scrub the shared command buffer during TPM2_Cleanup

F-7265 - Remove dead short-response guard in SPDM swtpm IO callback

F-7268 - Fail GET_PUBK when the responder public key exceeds the context buffer

F-7274 - Guard block round-up against wrap in hash update cache

F-7267 - Bound the PSS padding block against the caller stack buffer

F-7285 - Scrub the PSS stack hash context after freeing it

F-7283 - Scrub the NV index auth from the NVCreate compatibility wrapper

F-7284 - Scrub the hashed input copy in wolfTPM2_HashUpdate

F-7275 - Key GET_PUBK transcript insertion on the parsed vendor code

F-7281 - Scrub SPI transfer buffers in the advanced IO callback

F-7282 - Clear the private blob when the outer wrap fails

F-7261 - Use a constant-time compare for the bind entity Name test

F-7270 - Return a valid tag from AppendAuth on invalid arguments

F-7260 - Make PKCS#1 v1.5 unpadding branch-free