Mbed-TLS/mbedtls-framework
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls-framework.git synced 2026-09-18 16:19:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

Declare more functions that do not need buffer copying

Browse Source 
`psa_random_reseed()` is privileged. Hash, MAC and XOF are low-risk
per https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/795 .

Signed-off-by: Gilles Peskine <[email protected]>
This commit is contained in:
Gilles Peskine
2026-07-30 13:42:28 +02:00
parent 9ffe13506d
commit 01833c73be
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/mbedtls_framework/code_wrapper/psa_wrapper.py
+2
View File
@@ -150,7 +150,9 @@ class PSAWrapper(c_wrapper_generator.Base):
FUNCTIONS_NOT_REQUIRING_BUFFER_COPYING_RE = \
re.compile('|'.join([
'mbedtls_psa_inject_entropy', # privileged
'psa_(hash|mac|xof)_.*', # https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/795
'psa_crypto_driver_pake_get_.*', # no risk from simple getters
'psa_random_reseed', # privileged
]))
def _parameter_should_be_copied(self, function_name: str,
_buffer_name: Optional[str]) -> bool: