Skip to content

Commit c077860

Browse files
Declare more functions that do not need buffer copying
`psa_random_reseed()` is privileged. Hash, MAC and XOF are low-risk per Mbed-TLS/TF-PSA-Crypto#795 . Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
1 parent 588e1c0 commit c077860

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

scripts/mbedtls_framework/code_wrapper/psa_wrapper.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -150,7 +150,9 @@ def _detect_buffer_parameters(arguments: List[c_parsing_helper.ArgumentInfo],
150150
FUNCTIONS_NOT_REQUIRING_BUFFER_COPYING_RE = \
151151
re.compile('|'.join([
152152
'mbedtls_psa_inject_entropy', # privileged
153+
'psa_(hash|mac|xof)_.*', # https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/795
153154
'psa_crypto_driver_pake_get_.*', # no risk from simple getters
155+
'psa_random_reseed', # privileged
154156
]))
155157
def _parameter_should_be_copied(self, function_name: str,
156158
_buffer_name: Optional[str]) -> bool:

0 commit comments

Comments
 (0)