Fenrir fixes 2026 06 11 - #795

Merged

mattia-moffa merged 23 commits into

wolfSSL:masterfrom

danielinux:fenrir-fixes-2026-06-11

Jun 11, 2026

Commits on Jun 11, 2026

F-4411: fix uint32_t->int cast bypassing anti-rollback in hwswap wolfBoot_start
danielinux
committed
2ee4108
F-4410: fix uint32_t->int cast bypassing anti-rollback in update_ram wolfBoot_start
danielinux
committed
1016c4d
F-3974: zero ENCRYPT_CACHE stack buffer before return in hal_set_key
danielinux
committed
e81f262
F-3973: validate in_vec[N].len before dereferencing typed PS IPC pointers
danielinux
committed
108a33c
F-3972: add direction-sensitive unit tests for wolfBoot_dualboot_candidate_addr
danielinux
committed
61dbd25
F-3970: serialise custom TLV integer values through header_store_u64_le
danielinux
committed
1690522
F-3968: emit build-time warning when ALLOW_DOWNGRADE=1 is set
danielinux
committed
889788d
F-3966: fix hal_flash_erase loop bound in stm32wb.c skipping final partial page
danielinux
committed
2f53d0d
F-3965: fix hal_flash_erase loop bound in stm32l0.c skipping final partial page
danielinux
committed
15e4b81
F-3964: fix hal_flash_erase loop bound in stm32g0.c skipping final partial page
danielinux
committed
2f8f0c6
F-3963: fix hal_flash_erase loop bound in stm32c0.c skipping final partial page
danielinux
committed
4b95dc2
F-3962: fix hal_flash_erase loop bound in stm32u3.c skipping final partial page
danielinux
committed
ef85a1e
F-3741: zeroize digest and hash in uds_from_uid for stm32l5/stm32h5
danielinux
committed
a10a993
F-3738: fix policySz uint16_t underflow in wolfBoot_unseal_blob for short policy
danielinux
committed
ddf05a9
F-3736: fix pA_ver/pB_ver int/uint32_t mismatch in update_disk wolfBoot_start
danielinux
committed
2365e45
F-3735: fix EndingAddress uint32_t* arithmetic in x86_64_efi_do_boot
danielinux
committed
5cec621
F-5675: fix signed-overflow UB from uint8_t<<24 in serve_update version assembly
danielinux
committed
524397d
F-4968: fix wc_FreeRsaKey missing on early-return paths in wolfHSM RSA verify
danielinux
committed
f600fe9
F-3969: warn when WOLFBOOT_UDS_UID_FALLBACK_FORTEST=1 weakens UDS to public device UID
danielinux
committed
e9b70fe
F-3967: propagate HAL_Spi_Transmit errors in FRAM_Write and FRAM_Init
danielinux
committed
333055d
F-3740: add roundtrip test for shrinking firmware delta (size_a > size_b)
danielinux
committed
405a142
F-3734: add unit tests for magic check and item_count boundary in flash_otp_keystore
danielinux
committed
809b98d
Fix two regressions after the fenrir changes
danielinux
committed
fe934ff

Navigation Menu

Uh oh!

Fenrir fixes 2026 06 11 - #795

Fenrir fixes 2026 06 11#795
mattia-moffa merged 23 commits into
wolfSSL:masterfrom
danielinux:fenrir-fixes-2026-06-11

Commits on Jun 11, 2026

F-4411: fix uint32_t->int cast bypassing anti-rollback in hwswap wolfBoot_start

F-4410: fix uint32_t->int cast bypassing anti-rollback in update_ram wolfBoot_start

F-3974: zero ENCRYPT_CACHE stack buffer before return in hal_set_key

F-3973: validate in_vec[N].len before dereferencing typed PS IPC pointers

F-3972: add direction-sensitive unit tests for wolfBoot_dualboot_candidate_addr

F-3970: serialise custom TLV integer values through header_store_u64_le

F-3968: emit build-time warning when ALLOW_DOWNGRADE=1 is set

F-3966: fix hal_flash_erase loop bound in stm32wb.c skipping final partial page

F-3965: fix hal_flash_erase loop bound in stm32l0.c skipping final partial page

F-3964: fix hal_flash_erase loop bound in stm32g0.c skipping final partial page

F-3963: fix hal_flash_erase loop bound in stm32c0.c skipping final partial page

F-3962: fix hal_flash_erase loop bound in stm32u3.c skipping final partial page

F-3741: zeroize digest and hash in uds_from_uid for stm32l5/stm32h5

F-3738: fix policySz uint16_t underflow in wolfBoot_unseal_blob for short policy

F-3736: fix pA_ver/pB_ver int/uint32_t mismatch in update_disk wolfBoot_start

F-3735: fix EndingAddress uint32_t* arithmetic in x86_64_efi_do_boot

F-5675: fix signed-overflow UB from uint8_t<<24 in serve_update version assembly

F-4968: fix wc_FreeRsaKey missing on early-return paths in wolfHSM RSA verify

F-3969: warn when WOLFBOOT_UDS_UID_FALLBACK_FORTEST=1 weakens UDS to public device UID

F-3967: propagate HAL_Spi_Transmit errors in FRAM_Write and FRAM_Init

F-3740: add roundtrip test for shrinking firmware delta (size_a > size_b)

F-3734: add unit tests for magic check and item_count boundary in flash_otp_keystore

Fix two regressions after the fenrir changes