Merge branch 'master' into update-flash-elf-tc3xx-integration

Author: bigbrett

.github/workflows/footprint.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true
 

.github/workflows/test-build-kontron-vx3060-s2.yml

@@ -7,7 +7,7 @@ jobs:
   fsp_qemu_test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true
       - name: install req

.github/workflows/test-configs.yml

@@ -106,6 +106,13 @@ jobs:
       config-file: ./config/examples/kinetis-k82f.config
 
   library_test:
+    uses: ./.github/workflows/test-build.yml
+    with:
+      arch: host
+      config-file: ./config/examples/library.config
+      make-args: test-lib
+
+  libwolfboot_test:
     uses: ./.github/workflows/test-build.yml
     with:
       arch: host

.github/workflows/test-cppcheck.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: false
 

.github/workflows/test-library.yml

@@ -0,0 +1,57 @@
+name: wolfBoot as Library test
+
+on:
+  push:
+    branches: [ 'master', 'main', 'release/**' ]
+  pull_request:
+    branches: [ '*' ]
+
+jobs:
+  test-lib:
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        math: [SPMATH=1 WOLFBOOT_SMALL_STACK=0,
+               SPMATH=1 WOLFBOOT_SMALL_STACK=1,
+               SPMATHALL=1 WOLFBOOT_SMALL_STACK=0,
+               SPMATHALL=1 WOLFBOOT_SMALL_STACK=1,
+               SPMATH=0 SPMATHALL=0 WOLFBOOT_SMALL_STACK=0,
+               SPMATH=0 SPMATHALL=0 WOLFBOOT_SMALL_STACK=1]
+        asym: [ed25519, ecc256, ecc384, ecc521, rsa2048, rsa3072, rsa4096, ed448]
+        hash: [sha256, sha384, sha3]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: true
+
+      - name: make clean
+        run: |
+          make keysclean && make -C tools/keytools clean && rm -f include/target.h
+
+      - name: Build test-lib
+        env:
+          ASYM: ${{ matrix.asym }}
+          HASH: ${{ matrix.hash }}
+        run: |
+          cp config/examples/library.config .config
+          make keytools
+          ./tools/keytools/keygen --${{ matrix.asym }} -g wolfboot_signing_private_key.der
+          echo "Test" > test.bin
+          ./tools/keytools/sign --${{ matrix.asym }} --${{ matrix.hash }} test.bin wolfboot_signing_private_key.der 1
+          # Convert asym and hash to upper case
+          make test-lib SIGN=${ASYM^^} HASH=${HASH^^}
+
+      - name: Run test-lib
+        run: |
+          ./test-lib test_v1_signed.bin
+          ./test-lib test_v1_signed.bin 2>&1 | grep "Firmware Valid"
+
+      - name: Run test-lib (expect failure)
+        run: |
+          # Corrupt signed binary
+          truncate -s -1 test_v1_signed.bin
+          echo "A" >> test_v1_signed.bin
+          ./test-lib test_v1_signed.bin
+          ./test-lib test_v1_signed.bin 2>&1 | grep "Failure"

.github/workflows/test-renode-fastmath.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true
 

.github/workflows/test-units.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true
 

.github/workflows/test-wolfhsm-simulator.yml

@@ -53,6 +53,9 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: wolfssl/wolfHSM-examples
+          # Make sure to update this when the wolfHSM submodule is updated!
+          #ref: wolfHSM-v1.1.0
+          ref: 3e03bd4d4a8439ed4a8a9577823c89e4c37eb9be
           path: wolfHSM-examples
 
       - name: Build example POSIX TCP server

.github/workflows/test-x86-fsp-qemu.yml

@@ -7,7 +7,7 @@ jobs:
   fsp_qemu_test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true
       - name: install req

.gitignore

@@ -116,16 +116,15 @@ tools/tpm/pcr_extend
 tools/tpm/policy_create
 tools/tpm/policy_sign
 config/*.ld
+test-lib
 
 # Elf preprocessing tools
 tools/squashelf/**
 !tools/squashelf/squashelf.c
 !tools/squashelf/Makefile
 !tools/squashelf/README.md
 
-
-
-# Generated confiuguration file
+# Generated configuration file
 .config
 .vs
 *.filters
@@ -152,7 +151,7 @@ hal/x86_fsp_qemu_stage1.ld
 
 debug/lauterbach
 
-#cland cache
+#clangd cache
 .cache/*
 
 #gcov files