Additional sanity checks for QNX + CAAM resource manager

[JacobBarthelmeh]

For internal reports f-11224 and f-8236

[Copilot]

Pull request overview

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Adds defensive validation around untrusted client-provided sizes/flags for CAAM QNX resmgr operations and makes the device node permissions configurable.

Changes:

• Introduces WOLFSSL_CAAM_QNX_MAX_SZ and WOLFSSL_CAAM_QNX_DEV_MODE configuration macros.
• Adds size sanity checks and safer aggregate-size arithmetic in CMAC and AES paths.
• Tightens read-length validation to avoid partially-initialized buffers being used.

Suppressed comments (1)

wolfcrypt/src/port/caam/caam_qnx.c:428

• When resmgr_msgreadv() fails (ret < 0), returning EOVERFLOW conflates an I/O error with a short-read/undersized message, and hides the underlying failure mode. Handle ret < 0 separately (e.g., return ECANCELED or the appropriate errno from the resmgr layer), and reserve EOVERFLOW (or EBADMSG) for the ret < expSz short-read case.

    expSz = msgSz + keySz + (int)sizeof(ctx);
    ret = resmgr_msgreadv(ctp, in_iovs, numBuf, idx);
    if (ret < 0 || ret < expSz) {
        /* sanity check that the read worked and enough data was sent */
        if (buf != NULL)
            CAAM_ADR_UNMAP(buf, 0, msgSz, 0);
        return EOVERFLOW;
    }

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[wolfSSL-Bot]

Can one of the admins verify this patch?

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• linuxkm-standard
• stm32-sim-stm32h753

[JacobBarthelmeh]

Retest this please Jenkins Opps not found