Fenrir fixes 2026 06 05#788

Merged

mattia-moffa merged 12 commits into

wolfSSL:masterfrom

danielinux:fenrir-fixes-2026-06-05

Jun 6, 2026

Commits on Jun 5, 2026

F-5672: cache NS in_vec[1].len in ARM_TEE_PS_SET to close TOCTOU double-fetch
danielinux
committed
F-4965: bound hdr->pos in bitmap_put to prevent OOB write from corrupted vault
danielinux
committed
F-4711: bound e820 entries to prevent boot_params stack overflow
danielinux
committed
F-4710: reject oversized FDT property length to prevent ~4GB FIT memcpy
danielinux
committed
F-4645: bound load_linux kernel size to prevent syssize*16 overflow
danielinux
committed
F-4644: validate NS pointers in TPM CSME_NSE_API veneers with cmse_check_address_range
danielinux
committed
F-4417: validate NS pointer in wcs_get_random CMSE veneer with cmse_check_address_range
danielinux
committed
F-4416: validate NS pointers in wcs_fwtpm_transmit CMSE veneer
danielinux
committed
F-4338: skip MMIO BAR with zero alignment to prevent length-wrap cursor stall
danielinux
committed
F-4337: validate NS pointer in wolfBoot_nsc_get_partition_state CMSE veneer
danielinux
committed
Updated .gitignore with new unit tests
danielinux
committed
Fix test regression, addressed copilot comments
danielinux
committed