Harden wolfTrust service isolation and recovery - #22

Open

aidangarske wants to merge 41 commits into

wolfSSL:mainfrom

aidangarske:fenrir-fixes-14095-14127

Commits on Sep 22, 2026

F-14097 - Correct boot pointer-validation comment
aidangarske
committed
4a3f9f0
F-14098 - Clarify VNET RX token exposure
aidangarske
committed
2ad72b0
F-14096 - Correct secure partition privilege comments
aidangarske
committed
2183259
F-14111 - Make queued mutex acquisition idempotent
aidangarske
committed
cd95ff8
F-14114 - Check active coroutine stack canaries
aidangarske
committed
f6fbbac
F-14104 - Panic on invalid wait output pointers
aidangarske
committed
99af9ab
F-14112 - Dispatch runnable lock waiters
aidangarske
committed
e4ad972
F-14118 - Erase shared HSM relay buffers
aidangarske
committed
6a5e485
F-14124 - Erase HSM client response buffers
aidangarske
committed
6c85f87
F-14125 - Erase storage client request copies
aidangarske
committed
cd2f367
F-14119 - Erase per-guest HSM relay buffers
aidangarske
committed
da41799
F-14122 - Erase HSM state during relay recovery
aidangarske
committed
986ff51
F-14123 - Erase HSM tasklet state on fault
aidangarske
committed
6a1f083
F-14095 - Correct HSM fault notification comments
aidangarske
committed
c0901f9
F-14109 - Restore residual virtual SysTick period
aidangarske
committed
8e4b5ab
F-14126 - Scrub restart-clear RAM before quarantine
aidangarske
committed
e25079b
F-14127 - Erase non-word-aligned guest RAM tails
aidangarske
committed
0428c38
F-14108 - Release IPC resources on quarantine
aidangarske
committed
61dd392
F-14101 - Address the Non-secure NVIC banks
aidangarske
committed
b03ac65
F-14102 - Support the full Secure IRQ range
aidangarske
committed
af64aae
F-14120 - Erase flash programming words
aidangarske
committed
ad5ebac
F-14121 - Erase flash read-back buffers
aidangarske
committed
b5e2219
F-14117 - Pad unaligned firmware update writes
aidangarske
committed
7397831
F-14107 - Preserve FWU state when disarm fails
aidangarske
committed
fda8cbd
F-14099 - Erase vault request and plaintext buffers
aidangarske
committed
68447af
F-14100 - Erase storage request and plaintext buffers
aidangarske
committed
2e99843
F-14106 - Preserve sealed removal and reject key deletion
aidangarske
committed
12cabaf

Commits on Sep 23, 2026

F-14106 - Cover sealed deletion recovery
aidangarske
committed
ccb69a7
F-14111 - Cover queued mutex handoff
aidangarske
committed
876ce9f
F-14123 - Preserve HSM fault canary
aidangarske
committed
297d77c
F-14117 - Cover padded FWU writes
aidangarske
committed
3a2d964
F-14107 - Cover failed FWU disarm
aidangarske
committed
78e6e97
F-14127 - Keep guest RAM clearing word-efficient
aidangarske
committed
1846480
F-14100 - Keep full buffer clearing responsive
aidangarske
committed
f2883e2
F-14109 - Reset and latch guest SysTick safely
aidangarske
committed
7ea9fa2
F-14118 - Preserve relay flow while clearing packets
aidangarske
committed
ef2f884
Merge main for native crypto engine updates
aidangarske
committed
0af59c2
F-14111 - Correct lock-wait diagnostic comment
aidangarske
committed
333bc0c
F-14123 - Keep HSM tasklet faults contained
aidangarske
committed
9575938
F-14106 - Preserve keys during sealed delete recovery
aidangarske
committed
b89d092
Reject key deletion through vault storage remove
aidangarske
committed
b8c2d87