Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening - #561

Merged

dgarske merged 25 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-7263-7285

Jul 29, 2026

Commits on Jul 27, 2026

F-7263 - Always start policy session in PCR policy example
aidangarske
committed

Commits on Jul 29, 2026

F-7272 - Honor caller response buffer capacity in FWTPM_ProcessCommand
aidangarske
committed
F-7277 - Return TPM_RC_TYPE for an unrecognized TestParms public type
aidangarske
committed
F-7276 - Validate classical public parameters in TestParms
aidangarske
committed
F-7264 - Mask with RC_MAX_FMT1 when testing for TPM_RC_CURVE
aidangarske
committed
F-7266 - Mask with RC_MAX_FMT1 in bench unsupported-symmetric check
aidangarske
committed
F-7269 - Skip ML-DSA verify when the sign section produced no signature
aidangarske
committed
F-7026 - Set error code when public key buffer allocation fails in quote
aidangarske
committed
F-7271 - Compare NV index type with equality instead of bitwise AND
aidangarske
committed
F-7273 - Reject secured-only vendor commands arriving in SPDM clear frames
aidangarske
committed
F-7280 - Zeroize WOLFTPM2_DEV before returning it to the heap
aidangarske
committed
F-7279 - Scrub the shared command buffer during TPM2_Cleanup
aidangarske
committed
F-7265 - Remove dead short-response guard in SPDM swtpm IO callback
aidangarske
committed
F-7268 - Fail GET_PUBK when the responder public key exceeds the context buffer
aidangarske
committed
F-7274 - Guard block round-up against wrap in hash update cache
aidangarske
committed
F-7267 - Bound the PSS padding block against the caller stack buffer
aidangarske
committed
F-7285 - Scrub the PSS stack hash context after freeing it
aidangarske
committed
F-7283 - Scrub the NV index auth from the NVCreate compatibility wrapper
aidangarske
committed
F-7284 - Scrub the hashed input copy in wolfTPM2_HashUpdate
aidangarske
committed
F-7275 - Key GET_PUBK transcript insertion on the parsed vendor code
aidangarske
committed
F-7281 - Scrub SPI transfer buffers in the advanced IO callback
aidangarske
committed
F-7282 - Clear the private blob when the outer wrap fails
aidangarske
committed
F-7261 - Use a constant-time compare for the bind entity Name test
aidangarske
committed
F-7270 - Return a valid tag from AppendAuth on invalid arguments
aidangarske
committed
F-7260 - Document PKCS#1 v1.5 unpadding is for public signature data only
aidangarske
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening - #561

Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening#561
dgarske merged 25 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-7263-7285

Commits on Jul 27, 2026

F-7263 - Always start policy session in PCR policy example

Commits on Jul 29, 2026

F-7272 - Honor caller response buffer capacity in FWTPM_ProcessCommand

F-7277 - Return TPM_RC_TYPE for an unrecognized TestParms public type

F-7276 - Validate classical public parameters in TestParms

F-7264 - Mask with RC_MAX_FMT1 when testing for TPM_RC_CURVE

F-7266 - Mask with RC_MAX_FMT1 in bench unsupported-symmetric check

F-7269 - Skip ML-DSA verify when the sign section produced no signature

F-7026 - Set error code when public key buffer allocation fails in quote

F-7271 - Compare NV index type with equality instead of bitwise AND

F-7273 - Reject secured-only vendor commands arriving in SPDM clear frames

F-7280 - Zeroize WOLFTPM2_DEV before returning it to the heap

F-7279 - Scrub the shared command buffer during TPM2_Cleanup

F-7265 - Remove dead short-response guard in SPDM swtpm IO callback

F-7268 - Fail GET_PUBK when the responder public key exceeds the context buffer

F-7274 - Guard block round-up against wrap in hash update cache

F-7267 - Bound the PSS padding block against the caller stack buffer

F-7285 - Scrub the PSS stack hash context after freeing it

F-7283 - Scrub the NV index auth from the NVCreate compatibility wrapper

F-7284 - Scrub the hashed input copy in wolfTPM2_HashUpdate

F-7275 - Key GET_PUBK transcript insertion on the parsed vendor code

F-7281 - Scrub SPI transfer buffers in the advanced IO callback

F-7282 - Clear the private blob when the outer wrap fails

F-7261 - Use a constant-time compare for the bind entity Name test

F-7270 - Return a valid tag from AppendAuth on invalid arguments

F-7260 - Document PKCS#1 v1.5 unpadding is for public signature data only