harden forcezero and compiler barriers

[stenslae]

Description

Added DSE protection by using volatile pointers in ForceZero(). Also added memory clobber to XASM_VOLATILE where supported in XFENCE.

Testing

Added a forcezero_test().

Cross compiled architectures: x86_64, aarch64, arm32, and riscv64. Statically analyzed and passed forcezero_test().

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10935

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

No new issues found in the changed files. ✅

[github-actions]

MemBrowse Memory Report

gcc-arm-cortex-m0plus

• FLASH: .text -68 B (-0.1%, 64,139 B / 262,144 B, total: 24% used)

gcc-arm-cortex-m3

• FLASH: .text -36 B (-0.0%, 122,489 B / 262,144 B, total: 47% used)

gcc-arm-cortex-m4

• FLASH: .text -64 B (-0.0%, 200,711 B / 262,144 B, total: 77% used)

gcc-arm-cortex-m4-dtls13

• FLASH: .text -64 B (-0.0%, 180,888 B / 1,048,576 B, total: 17% used)

gcc-arm-cortex-m4-openssl-compat

• FLASH: .text -128 B (-0.0%, 771,612 B / 1,048,576 B, total: 74% used)

gcc-arm-cortex-m4-pkcs7

• FLASH: .text -64 B (-0.0%, 213,076 B / 262,144 B, total: 81% used)

gcc-arm-cortex-m4-pq

• FLASH: .text -64 B (-0.0%, 279,856 B / 1,048,576 B, total: 27% used)

gcc-arm-cortex-m4-rsa-only

• FLASH: .text -64 B (-0.0%, 325,648 B / 1,048,576 B, total: 31% used)

gcc-arm-cortex-m4-tls13

• FLASH: .text -64 B (-0.0%, 236,537 B / 262,144 B, total: 90% used)

gcc-arm-cortex-m7-tls13

• FLASH: .text -64 B (-0.0%, 236,601 B / 262,144 B, total: 90% used)

linuxkm-pie

• Data: __patchable_function_entries +8 B (+0.0%, 25,976 B)

linuxkm-standard

• Data: __patchable_function_entries +8 B (+0.0%, 48,608 B)

stm32-sim-stm32h753

• FLASH: .text +2,152 B (+1.2%, 185,980 B / 2,097,152 B, total: 9% used)
  No memory changes detected for:
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10935

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10935

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

No new issues found in the changed files. ✅

[stenslae]

jenkins retest this please

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10935

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

No new issues found in the changed files. ✅

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10935

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

No new issues found in the changed files. ✅