Commit db6fef5f authored by August Bournique's avatar August Bournique Committed by Santeri Toikka
Browse files

Revised require to per HAS comment "Run a tool that tests the boundaries of... 

Revised require to per HAS comment "Run a tool that tests the boundaries of the input values".  While a typo obviously existed in the original mitigation, it is unclear if the goal was to run one test for the boundaries of the input values or to run two tests, the first for the input values themselves and the second for their boundaries. 

Resolves Issue #88 / HAS comment 49
parent b73c7e30

EN-304-625.md

+1 −1
Original line number Diff line number Diff line
@@ -731,7 +731,7 @@ The input fields of the product that may produce memory errors in the firmware o 
  * Reference: ER-SSDD, ER-MSAF

  * Objective: Prevent unauthorized memory access

  * Preparation: Identify input fields in the product that may produce memory errors

  * Activities: Run a tool that tests input values that test the boundaries of the input values (minimum valid, maximum valid, minimum possible, maximum possible, off-by-one, etc.) while monitoring for memory errors

  * Activities: Run a tool that tests the boundaries of the input values (minimum valid, maximum valid, minimum possible, maximum possible, off-by-one, etc.) while monitoring for memory errors

  * Verdict: All boundary values tested and all memory errors detected are documented and justified => PASS, otherwise FAIL

  * Evidence: Logs of boundary testing tool, memory error report, documentation of any memory errors