Skip to content

Heap allocation not identified as sealed capability by cheriot-audit #81

@raylau1

Description

@raylau1

When following the instructions in the firmware auditing exercise part 1, uncommenting the heap allocation code in sealed_capability.cc and running

xmake -P exercises
cheriot-audit --board=cheriot-rtos/sdk/boards/sonata.json \
              --firmware-report=build/cheriot/cheriot/release/firmware_auditing_part_1.json \
              --module=exercises/firmware_auditing/part_1/no_sealed_capabilities.rego \
              --query='data.no_seal.valid'

does not correctly return false since branch v1.2. The same audit returns false as expected when using branch v1.1 and v1.0.

The sealed_capability compartment in the generated firmware_auditing_part_1.json when using branch v1.3 is shown below:

Image

The same section when using branch v1.1 is shown below, objects that were missing when using branch v1.3 are highlighted:

Image

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions