Harden wolfTPM examples fwTPM and SPDM error handling and secret zeroization - #604

Merged

dgarske merged 45 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-9172-13499

Sep 11, 2026

Commits on Sep 10, 2026

F-9172 - Use XSTRNCMP to parse the -digest option in pcr policy
aidangarske
committed
319d689
F-9173 - Return an error status from pcr policy argument validation
aidangarske
committed
9132602
F-9174 - Unload the TPM hash sequence object on failure paths
aidangarske
committed
7792efb
F-9175 - Return the flush result for an explicit handle
aidangarske
committed
995b087
F-9180 - Mask to the format-one field when checking hash bench errors
aidangarske
committed
c425242
F-9182 - Free PKCS7 state on error paths in the sign verify examples
aidangarske
committed
b58bee5
F-11903 - Reject a negative get random length argument
aidangarske
committed
e3cbe8e
F-11901 - Fail make credential when the AK name cannot be read
aidangarske
committed
9496363
F-13461 - Return success from the capabilities example handle listing
aidangarske
committed
7d4d397
F-10763 - Return an error on a GPIO config vendor mismatch
aidangarske
committed
27d1bf5
F-13457 - Return an error for incomplete firmware update arguments
aidangarske
committed
3adb0f5
F-13463 - Clear ECC r and s on all policy signing paths
aidangarske
committed
0d3f2f7
F-12753 - Wipe the hex render buffer in the Espressif debug helper
aidangarske
committed
03446a7
F-13532 - Bound the advanced IO SPI size to the frame buffer
aidangarske
committed
4b76ba6
F-11908 - Reject truncated Nations GET_STATUS payloads
aidangarske
committed
cedcd8e
F-11909 - Reject an empty Nuvoton GET_STATUS response
aidangarske
committed
1be467d
F-11891 - Correct the SPDM disconnect key wipe comment
aidangarske
committed
38850ce
F-9179 - Reject a NULL vendor payload with a nonzero size
aidangarske
committed
e86c757
F-10762 - Reject an oversized vendor payload that wraps the length field
aidangarske
committed
43f3484
F-10760 - Size the key exchange buffer check to the encoded request
aidangarske
committed
c8ce45e
F-9176 - Provision the responder PSK only after the inner set succeeds
aidangarske
committed
19b33fb
F-9177 - Reset the responder only after the end session ack is encrypted
aidangarske
committed
550277e
F-13467 - Validate declared PSK exchange field lengths against the request
aidangarske
committed
3ac5feb
F-9185 - Fail MCTP encryption once the sequence number exceeds 16 bits
aidangarske
committed
60fd8ae
F-11934 - Advance the SPDM receive sequence only after authentication
aidangarske
committed
ef6e19e
F-13452 - Free the wrap HMAC only after it is initialized
aidangarske
committed
55135d1
F-13453 - Preserve an allocation failure before generating the context IV
aidangarske
committed
ae35819
F-11929 - Zeroize the append-only NV replay buffer before freeing
aidangarske
committed
b12c95e
F-10824 - Zeroize the NV journal load buffer before freeing
aidangarske
committed
f53b7ec
F-11930 - Zeroize the NV save marshal buffer before grow frees
aidangarske
committed
b8615b3
F-11931 - Zeroize the PCR authorization buffer before freeing
aidangarske
committed
36a549d
F-11932 - Zeroize the hierarchy authorization stack buffer
aidangarske
committed
efa68e4
F-12707 - Clean up wolfCrypt only when its init succeeded
aidangarske
committed
7f02fac
F-9193 - Assert the TIS FIFO can hold the maximum command response
aidangarske
committed
facc55c
F-12755 - Zeroize the session start nonce structures on all exits
aidangarske
committed
651a35f
F-11916 - Use a constant-time compare for the primary key cache lookup
aidangarske
committed
ed95d45
F-13531 - Guard the object name marshalling on a successful allocation
aidangarske
committed
022fe84
F-13530 - Guard the encrypted salt zeroization against a NULL buffer
aidangarske
committed
d679f5b
F-13529 - Guard the EncryptDecrypt input buffer against a NULL allocation
aidangarske
committed
e15f515
F-12713 - Reject malformed PCR_Read selection counts and sizes
aidangarske
committed
7ce7a67
F-13498 - Run policy assertion compares without short-circuiting on size
aidangarske
committed
6ecdd4b
F-13499 - Run the PolicyTemplate compare without short-circuiting on size
aidangarske
committed
c06f2c2
F-11933 - Skip the authorization area in no-auth-handle session commands
aidangarske
committed
c33c503
F-9194 - Zeroize the command auth cache on every process command exit
aidangarske
committed
58d0fa6
Advance SPDM receive sequence after auth and harden size checks
aidangarske
committed
1d8ea0c