When following the instructions in the firmware auditing exercise part 1, uncommenting the heap allocation code in sealed_capability.cc and running
xmake -P exercises
cheriot-audit --board=cheriot-rtos/sdk/boards/sonata.json \
--firmware-report=build/cheriot/cheriot/release/firmware_auditing_part_1.json \
--module=exercises/firmware_auditing/part_1/no_sealed_capabilities.rego \
--query='data.no_seal.valid'
does not correctly return false since branch v1.2. The same audit returns false as expected when using branch v1.1 and v1.0.
The sealed_capability compartment in the generated firmware_auditing_part_1.json when using branch v1.3 is shown below:
The same section when using branch v1.1 is shown below, objects that were missing when using branch v1.3 are highlighted:
