From 2ae4ec73002f85454a455d42270c40ef40d98284 Mon Sep 17 00:00:00 2001 From: Andrew Hutchings Date: Thu, 30 Jul 2026 15:57:15 +0100 Subject: [PATCH] SE050 CI: pin simulator that always enforces symmetric read policy Bump SIMULATORS_REF to the simulator commit that refuses ReadObject on an HMACKey object without POLICY_OBJ_ALLOW_READ in all modes, matching real hardware on every applet generation as verified on SE050C applet 3.1.1 silicon. With this pin a plain (non-strict) CI run reproduces the SW 0x6986 readback failure that previously only appeared on hardware, covering the pre-7.2 Binary derive target fix in the previous commit. The pinned commit is wolfSSL/simulators PR #11 and becomes fetchable from the upstream clone once that PR is merged. --- .github/workflows/se050-sim.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/se050-sim.yml b/.github/workflows/se050-sim.yml index 83f8a0413c..6483dfb565 100644 --- a/.github/workflows/se050-sim.yml +++ b/.github/workflows/se050-sim.yml @@ -31,7 +31,7 @@ permissions: # We patch it to COPY the PR checkout instead so CI reflects the PR's source. env: - SIMULATORS_REF: 7cb780a86ae25db8571463f52f7d495caa59e4b7 + SIMULATORS_REF: d8ca6318796c3cde35ca9a8af44250ab85335e21 jobs: se050_sim: