Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-01 18:50:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(esp_tee): Add missing input validation checks for TEE service calls

Browse Source 
- MULTI_HEAP_ASSERT for TEE now aborts on failure, instead of ignoring the condition
- Prevent potential TEE OTA write bounds overflow
This commit is contained in:
Laukik Hase
2026-04-08 14:05:28 +05:30
parent d4bf404df6
commit 7867f4a575
10 changed files with 416 additions and 154 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/esp_tee/test_apps/tee_cli_app/sdkconfig.ci.release
+1 -3
View File
@@ -1,8 +1,6 @@
# Reducing TEE I/DRAM sizes
# Reducing TEE IRAM size
# 29KB
CONFIG_SECURE_TEE_IRAM_SIZE=0x7400
# 20KB
CONFIG_SECURE_TEE_DRAM_SIZE=0x5000
# TEE Secure Storage: Release mode
CONFIG_SECURE_TEE_SEC_STG_MODE_RELEASE=y
components/esp_tee/test_apps/tee_cli_app/sdkconfig.ci.sb_fe
+6
View File
@@ -1,3 +1,9 @@
# Increasing TEE I/DRAM sizes
# 34KB
CONFIG_SECURE_TEE_IRAM_SIZE=0x8800
# 22KB
CONFIG_SECURE_TEE_DRAM_SIZE=0x5800
# Security features - build-only configuration
CONFIG_PARTITION_TABLE_OFFSET=0xf000