Anthony Hu 00d0b09401 Fix buffer-overflow in LMS leaf cache indexing ...

wc_lms_treehash_init() writes leaf node hashes into the leaf cache
using an absolute index (i * hash_len), but the cache is only
max_cb entries starting from leaf->idx. When leaf->idx > 0 (which
occurs when wc_LmsKey_Reload is called after signing more than
max_cb times), the write goes past the end of the cache buffer.

Fix by using the relative offset (i - leaf->idx) * hash_len instead.

Added unit tests (test_lms.c):
  - test_wc_LmsKey_sign_verify: basic sign/verify sanity check
  - test_wc_LmsKey_reload_cache: (TDD) reproduces the overflow by
    signing 33 times then reloading the key

2026-03-11 16:58:48 -04:00

..

benchmark

Merge pull request #9765 from night1rider/zephyr-4_3_0-posix-fix

2026-03-10 22:28:43 -05:00

src

Fix buffer-overflow in LMS leaf cache indexing

2026-03-11 16:58:48 -04:00

test

Merge pull request #9933 from rlm2002/coverity

2026-03-10 22:32:23 -05:00