1015 Commits
Author SHA1 Message Date
David Drysdale c2b3aeca88 cbor: don't allow infinite nesting by default
Change the read()/write() methods to use a nesting limit of 127
internally, to avoid the possibility of heavily nested inputs exhausting
the stack.

Library users that still want to skip nesting checks can still get at
this functionality by using `{read,write}_nested(..., None)`.
2021-09-09 07:03:27 +02:00
Julien Cretin c6af7c0a2d Make sure the end offset doesn't overflow
We used to only check that the length was not too big but didn't check that the
starting offset wasn't too big. We want the end offset to not overflow.
2021-08-30 11:52:02 +02:00
Julien Cretin 7418196814 Specificy encoding when opening rust-toolchain file
This probably is just ASCII.
2021-08-30 11:41:14 +02:00
Julien Cretin cbbb4b3e08 Reduce the store fuzzer input length 2021-08-30 11:41:14 +02:00
Julien Cretin ed28941a6d Decrease maximum input size for store fuzzing
We currently have around 12% inputs timing out (was around 27% before the 100k
limit).
2021-08-13 22:15:50 +02:00
Julien Cretin a80ff4279c Install Rust tools with stable compiler
We only need the frozen nightly for Tock (and maybe the app).
2021-08-13 15:31:10 +02:00
Julien Cretin b5b9d3f6e0 Fix ctap2 fuzz targets to use prod cbor parsing
This fixes a left-over from #329.
2021-08-11 16:00:30 +02:00
Julien Cretin 659f8a16a2 Remove elf2tab dev-dependency
We don't use it anymore. Not sure when we used to use it.

Fixes #364
2021-08-10 11:43:58 +02:00
Julien Cretin ec994eac32 Apply all patches in the patches directory 2021-08-09 13:55:55 +02:00
Julien Cretin 53da98c272 Add restore command 2021-08-09 13:55:55 +02:00
Julien Cretin 0f70a211ea Use bash, no rsync, add doc 2021-08-09 13:55:55 +02:00
Julien Cretin 7a812a657b fix reproduce scripts 2021-08-09 13:55:55 +02:00
Julien Cretin d25f65c565 Add tool for applying/saving Tock patches 2021-08-09 13:55:55 +02:00
Julien Cretin 69f1b672f1 Fix all boards and move diff to directory 2021-08-07 11:29:07 +02:00
Julien Cretin ad0605c2fa Make flash syscall interface async 2021-08-07 11:29:07 +02:00
Julien Cretin 3d4b652e12 Increase the max data len from 10k to 100k 2021-08-05 15:08:53 +02:00
Julien Cretin 445c1c6edd Explicitly limit the fuzzer input length
This is to avoid timeouts in oss-fuzz.
2021-08-05 15:08:53 +02:00
kaczmarczyck b7a3e06cf4 ECDSA signatures and public keys in CTAP (#358)
* ECDSA signatures and public keys in CTAP

* adds one constant usage

* documents pub functions in ECDSA

* typo: involved

* extends wrong length test
2021-08-04 13:39:49 +02:00
Julien Cretin 7bb4960730 Output copy/paste table for store latency 2021-08-03 09:03:49 +02:00
Jean-Michel Picod f5de994ad4 Fix coveralls workflow (#355) 2021-08-02 17:15:44 +02:00
Julien Cretin 58ae1ac8b1 Update store latency numbers (#354)
The main difference comes from c03605aa0c where we
started using -Oz instead of -O. A similar difference in latency is probably
expected in crypto and cbor too.
2021-08-02 16:15:52 +02:00
Julien Cretin 14115fbc79 Fix #348 (#351)
The dongle_dfu board should copy the dongle_opensk board and not the dongle
board. This issue was introduced by #334.
2021-08-02 09:52:25 +02:00
kaczmarczyck a532959e8f Interface to syscalls to partition location types (#340)
* adds syscalls to use the partition location types

* no range implementation, helper file, refactorings

* more refactoring of syscall interface

* adds and refines trait

* improved documentation and partition_length function

* simplified ModRange

* cleanup

* new aligned_iter implementation
2021-07-20 10:37:57 +02:00
Fabian Kaczmarczyck 146b54e9d0 adds and links new security policy 2021-07-09 11:52:16 +02:00
Jean-Michel Picod 826c4f3021 Fix coveralls badge not pointing to the branch (#341) 2021-07-06 11:22:21 +02:00