islet-project / islet

An on-device confidential computing platform
Apache License 2.0
93 stars 17 forks source link

Do not miss content wiping in granule undelegate #307

Closed zpzigi754 closed 5 months ago

zpzigi754 commented 6 months ago

This PR fixes a bug in granule_undelegate, found by model checking. Note that the previous page table-based GST didn't contain this bug.

[B.3.3.6.3 Success conditions in beta0 (B.4.3.6.3 in eac5)]

ID                 Condition
...
gran_content       Contents of target Granule are wiped.