From 01833c73bea98d773d79318831900cea6ca9a5a5 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Thu, 28 May 2026 15:07:50 +0200 Subject: [PATCH] Declare more functions that do not need buffer copying `psa_random_reseed()` is privileged. Hash, MAC and XOF are low-risk per https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/795 . Signed-off-by: Gilles Peskine --- scripts/mbedtls_framework/code_wrapper/psa_wrapper.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/mbedtls_framework/code_wrapper/psa_wrapper.py b/scripts/mbedtls_framework/code_wrapper/psa_wrapper.py index 4e3476f67..2164f6259 100644 --- a/scripts/mbedtls_framework/code_wrapper/psa_wrapper.py +++ b/scripts/mbedtls_framework/code_wrapper/psa_wrapper.py @@ -150,7 +150,9 @@ class PSAWrapper(c_wrapper_generator.Base): FUNCTIONS_NOT_REQUIRING_BUFFER_COPYING_RE = \ re.compile('|'.join([ 'mbedtls_psa_inject_entropy', # privileged + 'psa_(hash|mac|xof)_.*', # https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/795 'psa_crypto_driver_pake_get_.*', # no risk from simple getters + 'psa_random_reseed', # privileged ])) def _parameter_should_be_copied(self, function_name: str, _buffer_name: Optional[str]) -> bool: