harden forcezero and compiler barriers

[stenslae]

Description

Added DSE protection by using volatile pointers in ForceZero(). Also added memory clobber to XASM_VOLATILE where supported.

Testing

Added a forcezero_test().

Cross compiled architectures: x86_64, aarch64, arm32, and riscv64. Statically analyzed and passed forcezero_test().

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10935

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

No new issues found in the changed files. ✅

[github-actions]

MemBrowse Memory Report

gcc-arm-cortex-m0plus

• FLASH: .text -68 B (-0.1%, 64,115 B / 262,144 B, total: 24% used)

gcc-arm-cortex-m3

• FLASH: .text -36 B (-0.0%, 122,469 B / 262,144 B, total: 47% used)

gcc-arm-cortex-m4

• FLASH: .text -64 B (-0.0%, 200,320 B / 262,144 B, total: 76% used)

gcc-arm-cortex-m4-dtls13

• FLASH: .text -64 B (-0.0%, 180,888 B / 1,048,576 B, total: 17% used)

gcc-arm-cortex-m4-openssl-compat

• FLASH: .text -64 B (-0.0%, 771,212 B / 1,048,576 B, total: 74% used)

gcc-arm-cortex-m4-pq

• FLASH: .text -64 B (-0.0%, 279,460 B / 1,048,576 B, total: 27% used)

gcc-arm-cortex-m4-rsa-only

• FLASH: .text -64 B (-0.0%, 325,056 B / 1,048,576 B, total: 31% used)

gcc-arm-cortex-m4-tls12

• FLASH: .text -64 B (-0.1%, 123,213 B / 262,144 B, total: 47% used)

gcc-arm-cortex-m4-tls13

• FLASH: .text -64 B (-0.0%, 236,146 B / 262,144 B, total: 90% used)

gcc-arm-cortex-m7-pq

• FLASH: .text -64 B (-0.0%, 280,036 B / 1,048,576 B, total: 27% used)

linuxkm-pie

• Data: __patchable_function_entries +8 B (+0.0%, 25,568 B)

linuxkm-standard

• Data: __patchable_function_entries +8 B (+0.0%, 48,256 B)

stm32-sim-stm32h753

• FLASH: .text +2,088 B (+1.1%, 185,548 B / 2,097,152 B, total: 9% used)
  No memory changes detected for:
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-tls13

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10935

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10935

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

No new issues found in the changed files. ✅

[stenslae]

jenkins retest this please