[TF-M] Re: Partition log write UART without validation of permissions.

Hi Roman,

Thanks for reporting this, will ping you and let's discuss in a secure channel for such issues.

/Ken

From: Roman.Mazurak--- via TF-M tf-m@lists.trustedfirmware.org Sent: Monday, December 4, 2023 10:07 PM To: tf-m@lists.trustedfirmware.org Subject: [TF-M] Partition log write UART without validation of permissions.

Hi all,

I noticed that partition log subsystem uses stdio_output_string through following chain of calls tfm_hal_output_sp_log => SVC TFM_SVC_OUTPUT_UNPRIV_STRING => tfm_hal_output_spm_log => stdio_output_string. SVC handler doesn't validate arguments, so it's allows APP RoT partitions to access PSA RoT memory via partition log subsystem. It seems that tfm_hal_memory_check must be called on SVC handler to validate permissions.

Best Regards, Roman.