commit bc39ded227e406003934f43cef069c4118bd5961
author Maulik Patel <maulik.patel@arm.com> Tue Nov 19 11:08:40 2024 +0000
committer Maulik Patel <maulik.patel@arm.com> Wed Nov 20 12:27:04 2024 +0000
tree a244ebae3dcd1e5a936d922e9e2d930e6c437d50
parent 6f50cd7e79822911de3f9bebc38db482fc88945e

Musca B1: BL2: Fix public key stack corruption

Since thin psa crypto layer in BL2 does not copy the key data while
importing, its contents are corrupted by the following code. Hence
statically allocate key buffer instead.

Signed-off-by: Maulik Patel <maulik.patel@arm.com>
Change-Id: Idc7506b90eb0bc7cb6f4e6146e2db1c009a7e7ac

psa_crypto/adac_crypto_psa_pk.c

diff --git a/psa_crypto/adac_crypto_psa_pk.c b/psa_crypto/adac_crypto_psa_pk.c
index d78d0af..b5dab4b 100644
--- a/psa_crypto/adac_crypto_psa_pk.c
+++ b/psa_crypto/adac_crypto_psa_pk.c
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2020-2023, Arm Limited. All rights reserved.
+ * Copyright (c) 2020-2024, Arm Limited. All rights reserved.
  *
  * SPDX-License-Identifier: BSD-3-Clause
  *
@@ -11,8 +11,14 @@
 
 #include <string.h>
 
-#define PSA_ADAC_RSA3072
-#define PSA_ADAC_RSA4096
+#ifdef ADAC_STATIC_PUB_KEYS
+/* Since thin psa crypto layer in BL2 does not copy the key data, statically
+ * allocate key buffer
+ */
+#define ADAC_STATIC static
+#else
+#define ADAC_STATIC
+#endif /* ADAC_STATIC_PUB_KEYS */
 
 #if defined(PSA_ADAC_RSA3072) || defined(PSA_ADAC_RSA4096)
 #define ENCODED_EXPONENT_SIZE 5U
@@ -51,7 +57,7 @@
                                              psa_key_handle_t *handle)
 {
     psa_status_t ret;
-    uint8_t pub_key[RSA3072_ENCODED_PUB_KEY_MAX_SIZE];
+    ADAC_STATIC uint8_t pub_key[RSA3072_ENCODED_PUB_KEY_MAX_SIZE];
     size_t offset = RSA3072_HEADER_SIZE;
     size_t pub_size = RSA3072_ENCODED_PUB_KEY_SIZE;
 
@@ -123,7 +129,7 @@
                                              psa_key_handle_t *handle)
 {
     psa_status_t ret;
-    uint8_t pub_key[RSA4096_ENCODED_PUB_KEY_MAX_SIZE];
+    ADAC_STATIC uint8_t pub_key[RSA4096_ENCODED_PUB_KEY_MAX_SIZE];
     size_t offset = RSA4096_HEADER_SIZE;
     size_t pub_size = RSA4096_ENCODED_PUB_KEY_SIZE;
 
@@ -172,7 +178,7 @@
                                                psa_key_handle_t *handle)
 {
     psa_status_t ret;
-    uint8_t pub_key[ECDSA_P256_PUBLIC_KEY_SIZE + 1] = {0x04};
+    ADAC_STATIC uint8_t pub_key[ECDSA_P256_PUBLIC_KEY_SIZE + 1] = {0x04};
 
     if (ECDSA_P256_PUBLIC_KEY_SIZE == key_size) {
 
@@ -202,7 +208,7 @@
                                                psa_key_handle_t *handle)
 {
     psa_status_t ret;
-    uint8_t pub_key[ECDSA_P521_PUBLIC_KEY_SIZE + 1] = {0x04};
+    ADAC_STATIC uint8_t pub_key[ECDSA_P521_PUBLIC_KEY_SIZE + 1] = {0x04};
 
     if (ECDSA_P521_PUBLIC_KEY_SIZE == key_size) {