Fixes 20260414 - #748

Merged

dgarske merged 41 commits into

wolfSSL:masterfrom

danielinux:fixes-20260414

Apr 15, 2026

Commits on Apr 14, 2026

Harden constant-time compare accumulators
danielinux
committed
42c312e
Clamp unaligned SDHCI disk I/O spans
danielinux
committed
00892c2
Fix RAM fallback partition reselection
danielinux
committed
e10d9c1
Fix TPM unseal handle cleanup
danielinux
committed
dc7309c
loader: panic on TPM init failure
danielinux
committed
9265fe7
Add final sanity checks to boot paths
danielinux
committed
f8cbad0
Add partition overlap guards
danielinux
committed
41ffb2c
fix inverted emergency update branch hint
danielinux
committed
6ce320e
Add final sanity check in library boot path
danielinux
committed
6c9a0a0
Add rollback state assertion
danielinux
committed
b4b9ba3
Add update-size boundary coverage tests
danielinux
committed
7048dd6
Update .gitignore
danielinux
committed
249ebaa
Add erased-trailer partition state regression test
danielinux
committed
c8a94d8
Add delta base-version unit coverage
danielinux
committed
9421355
Reset hdr_ok when image open fails
danielinux
committed
194b363
test nvm sector flag invalid magic guard
danielinux
committed
6ef9e02
Fix external image hdr_ok state on open failure
danielinux
committed
871f03c
Fix endian handling for delta TLV consumers
danielinux
committed
2bd6274
delta: reject sector sizes that overflow 16-bit match length
danielinux
committed
bc4ec50
Reject oversized cert-chain TLVs in sign tool
danielinux
committed
657e337
sign tool: encode header fields as little-endian
danielinux
committed
46645a0
Reject oversized signature TLV lengths
danielinux
committed
cc7c3bb
Fix update sector flag index truncation
danielinux
committed
af24164
Fix WOLFBOOT_MAX_SPACE precedence and test
danielinux
committed
4c0f425
x86: zero ATA unlock secret on all sata_unlock_disk exits
danielinux
committed
dd6444b
keygen_xmss: zeroize XmssKey after free
danielinux
committed
76f0b3c
dice: zero IAK stack key on all exits
danielinux
committed
84562a4
dice: scrub non-IAK UDS buffer
danielinux
committed
8dbc7d6
dice: zero ECC signing key context on cleanup
danielinux
committed
da2c3dd
zeroize OTP UDS in stm32h5 derive path
danielinux
committed
25668dd
zero entropy buffer in sata_get_random_base64
danielinux
committed
e48c1eb
Fixed test regressions
danielinux
committed
faebb62
Adjusted footprint limits
danielinux
committed
8976078
Fixed more regressions
danielinux
committed
9ac6b1f
Addressed copilot comments
danielinux
committed
b007463
Addressed more copilot's comments
danielinux
committed
00342ac
Addressed Fenrir's review comments + fixed more regressions
danielinux
committed
a64fa8f
Addressed another round of reviews (copilot)
danielinux
committed
857cd36
Fixed wolfBoot_panic() visibility in lib + Fenrir comments
danielinux
committed
e6c1976
Fixed more comments from copilot + fenrir
danielinux
committed
6540f17
Fix actual overlap in hifive config
danielinux
committed
0809d83