Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening #182

Run time

Learn about OS pricing on GitHub Actions

Job	Run time
reject-no-pqc	1m 24s
build (cli-mldsa_all-mlkem_no, --enable-pqc --enable-mldsa=all --enable-mlkem=no --disable-fwtpm ...	1m 34s
build (cli-mldsa_signonly-mlkem_all, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=all --d...	1m 25s
build (cli-mldsa_all-mlkem_dec, --enable-pqc --enable-mldsa=all --enable-mlkem=dec --disable-fwtp...	1m 20s
build (cli-mldsa_all-mlkem_enc, --enable-pqc --enable-mldsa=all --enable-mlkem=enc --disable-fwtp...	1m 29s
build (cli-mldsa_all-mlkem_all, --enable-pqc --enable-mldsa=all --enable-mlkem=all --disable-fwtp...	1m 34s
build (cli-mldsa_signonly-mlkem_enc, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=enc --d...	1m 24s
build (cli-mldsa_verifyonly-mlkem_all, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=all...	1m 33s
build (cli-mldsa_no-mlkem_enc, --enable-pqc --enable-mldsa=no --enable-mlkem=enc --disable-fwtpm ...	1m 24s
build (cli-mldsa_no-mlkem_all, --enable-pqc --enable-mldsa=no --enable-mlkem=all --disable-fwtpm ...	1m 13s
build (fw-mldsa_all-mlkem_no, --enable-pqc --enable-mldsa=all --enable-mlkem=no --enable-fwtpm --...	1m 36s
build (cli-mldsa_no-mlkem_dec, --enable-pqc --enable-mldsa=no --enable-mlkem=dec --disable-fwtpm ...	1m 32s
build (cli-mldsa_verifyonly-mlkem_no, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=no -...	1m 21s
build (fw-mldsa_all-mlkem_dec, --enable-pqc --enable-mldsa=all --enable-mlkem=dec --enable-fwtpm ...	1m 24s
build (cli-mldsa_verifyonly-mlkem_enc, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=enc...	1m 22s
build (fw-mldsa_signonly-mlkem_enc, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=enc --en...	1m 37s
build (fw-mldsa_all-mlkem_all, --enable-pqc --enable-mldsa=all --enable-mlkem=all --enable-fwtpm ...	1m 28s
build (cli-mldsa_verifyonly-mlkem_dec, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=dec...	1m 21s
build (fw-mldsa_signonly-mlkem_no, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=no --enab...	1m 29s
build (fw-mldsa_signonly-mlkem_all, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=all --en...	1m 36s
build (fw-mldsa_signonly-mlkem_dec, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=dec --en...	1m 30s
build (cli-v185-full, --enable-v185 --disable-fwtpm --disable-examples)	1m 26s
build (cli-mldsa_signonly-mlkem_no, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=no --dis...	1m 22s
build (fw-mldsa_verifyonly-mlkem_enc, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=enc ...	1m 35s
build (fw-mldsa_all-mlkem_enc, --enable-pqc --enable-mldsa=all --enable-mlkem=enc --enable-fwtpm ...	1m 30s
build (fw-mldsa_no-mlkem_dec, --enable-pqc --enable-mldsa=no --enable-mlkem=dec --enable-fwtpm --...	1m 25s
build (cli-mldsa_signonly-mlkem_dec, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=dec --d...	1m 31s
build (fw-disable-pqc, --disable-pqc --enable-fwtpm --disable-examples)	1m 23s
build (fw-v185-full, --enable-v185 --enable-fwtpm --disable-examples)	1m 32s
build (cli-verifyencap-nohash, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=enc --disab...	1m 31s
build (fw-mldsa_no-mlkem_enc, --enable-pqc --enable-mldsa=no --enable-mlkem=enc --enable-fwtpm --...	1m 34s
build (fw-mldsa_verifyonly-mlkem_all, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=all ...	1m 13s
build (cli-disable-pqc, --disable-pqc --disable-fwtpm --disable-examples)	1m 31s
build (fw-mldsa_verifyonly-mlkem_dec, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=dec ...	1m 41s
build (fw-mldsa_verifyonly-mlkem_no, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=no --...	1m 21s
build (fw-verifyencap-nohash, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=enc --disabl...	1m 22s
build (fw-mldsa_no-mlkem_all, --enable-pqc --enable-mldsa=no --enable-mlkem=all --enable-fwtpm --...	1m 39s
	54m 12s

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening #182

Usage

Fix fwTPM response buffer overflow, SPDM clear-frame command bypass, and other misc hardening #182

Uh oh!

Run time