Change Details

our use case detected by tests, where we sending invec pointing to a RO section in flash moreover, buffers allocated from the heap on the secure side are not detected either. `tfm_memory_check` only checks data section for NS and fails the request by causing panic

our use case detected by tests, where we sending invec pointing to a RO section in flash moreover, buffers allocated from the heap on the secure side are not detected either. `tfm_memory_check` only checks data section for NS and fails the request by causing panic the needed chnages are: 1. check if a buffer comes from secure flash (example psa_write of const buffer in secure partition) 2. check if a buffer comes from non-secure flash (example: psa_call with one of the buffers pointing to a const memory chunk) 3. check if a buffer comes from secure heap (example psa_read to a buffer allocated by a secure partition)

our use case detected by tests, where we sending invec pointing to a RO section in flash moreover, buffers allocated from the heap on the secure side are not detected either. `tfm_memory_check` only checks data section for NS and fails the request by causing panic the needed chnages are: 1. check if a buffer comes from secure flash (example psa_write of const buffer in secure partition) 2. check if a buffer comes from non-secure flash (example: psa_call with one of the buffers pointing to a const memory chunk) 3. check if a buffer comes from secure heap (example psa_read to a buffer allocated by a secure partition)