Fenrir fixes 2026-08 -11 + build regressions fixes - #851

Merged

dgarske merged 25 commits into

wolfSSL:masterfrom

danielinux:fenrir-fixes-2026-08-11

Aug 12, 2026

Commits on Aug 11, 2026

F-7989: clamp unaligned head size in ext_flash_decrypt_read()
danielinux
committed
e6655e6
F-7988: clamp unaligned head size in ext_flash_encrypt_write()
danielinux
committed
7608e33
F-7969: validate boot-side digest before delta base hash compare
danielinux
committed
e200579
F-8006: return errors from delta base-hash validation in sign tool
danielinux
committed
748fa8a
F-8003: separate decoded key objects for hybrid signers
danielinux
committed
f9957da
F-7992: bound staged ciphertext in ext_flash_encrypt_write()
danielinux
committed
5dfdec3
F-7985: enter legacy uImage at ih_ep when it differs from ih_load
danielinux
committed
93edc29
F-8007: wipe TPM advanced-IO staging buffers in TPM2_IoCb()
danielinux
committed
f446a4a
F-7987: abort the swap when a sector copy fails
danielinux
committed
bc743ad
F-7383: use one consistent sector size in mcxw hal_flash_erase
danielinux
committed
ab7b79c
F-7382: clip QSPI page program transfers at the device page boundary
danielinux
committed
a799a98
F-7069: clear the EH authValue from the stack in wolfBoot_tpm2_get_timestamp
danielinux
committed
40021b8
F-6757: fix partial-word hal_flash_write on nrf52, nrf5340 and stm32l0
danielinux
committed
f755125
F-6130: clear disk_encrypt_key/nonce on the FIT DTS load failure path
danielinux
committed
f9fe138
update_disk: use wc_ForceZero() in the DISK_ENCRYPT helpers
danielinux
committed
4726dce
aarch64: link the ARM ChaCha port when ChaCha is selected
danielinux
committed
db8e768
libwolfboot: declare ForceZero() in the test-app build
danielinux
committed
e24fff0
test: bump footprint limits
danielinux
committed
31a9adc
Address PR review on the encrypted write and sector copy paths
danielinux
committed
fca6bf0

Commits on Aug 12, 2026

libwolfboot: propagate the head-block write failure
danielinux
committed
cfaf145
nrf52/nrf5340/stm32l0: fix the 32-bit fast path in hal_flash_write
danielinux
committed
a69b338
mcxw: extend the erase length when rounding the start down
danielinux
committed
a2706b9
update_ram: track the uImage entry override explicitly
danielinux
committed
acf0779
sign: scrub the primary key when the key load fails
danielinux
committed
6201ba4
gitignore: add two missing unit-test binaries
danielinux
committed
e4fd913

Navigation Menu

Uh oh!

Fenrir fixes 2026-08 -11 + build regressions fixes - #851

Fenrir fixes 2026-08 -11 + build regressions fixes#851
dgarske merged 25 commits into
wolfSSL:masterfrom
danielinux:fenrir-fixes-2026-08-11

Commits on Aug 11, 2026

F-7989: clamp unaligned head size in ext_flash_decrypt_read()

F-7988: clamp unaligned head size in ext_flash_encrypt_write()

F-7969: validate boot-side digest before delta base hash compare

F-8006: return errors from delta base-hash validation in sign tool

F-8003: separate decoded key objects for hybrid signers

F-7992: bound staged ciphertext in ext_flash_encrypt_write()

F-7985: enter legacy uImage at ih_ep when it differs from ih_load

F-8007: wipe TPM advanced-IO staging buffers in TPM2_IoCb()

F-7987: abort the swap when a sector copy fails

F-7383: use one consistent sector size in mcxw hal_flash_erase

F-7382: clip QSPI page program transfers at the device page boundary

F-7069: clear the EH authValue from the stack in wolfBoot_tpm2_get_timestamp

F-6757: fix partial-word hal_flash_write on nrf52, nrf5340 and stm32l0

F-6130: clear disk_encrypt_key/nonce on the FIT DTS load failure path

update_disk: use wc_ForceZero() in the DISK_ENCRYPT helpers

aarch64: link the ARM ChaCha port when ChaCha is selected

libwolfboot: declare ForceZero() in the test-app build

test: bump footprint limits

Address PR review on the encrypted write and sector copy paths

Commits on Aug 12, 2026

libwolfboot: propagate the head-block write failure

nrf52/nrf5340/stm32l0: fix the 32-bit fast path in hal_flash_write

mcxw: extend the erase length when rounding the start down

update_ram: track the uImage entry override explicitly

sign: scrub the primary key when the key load fails

gitignore: add two missing unit-test binaries