1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-25 16:16:38 +03:00

Commit Graph

  • f6cf8068c6 Code review feedback: refactor wolfSSL_X509_STORE_get0_objects to use ref counting to simplify freeing. Kareem 2026-08-06 11:56:38 -07:00
  • 28c0e7e6a6 Code review feedback Kareem 2026-08-05 15:11:56 -07:00
  • 2332df95bb Fix RPK unit test failing under --enable-all. Kareem 2026-08-03 11:25:09 -07:00
  • c0120c0b4f Code review feedback: Remove unneeded X509StoreRemoveCa call, reduce comment verbosity, add test Kareem 2026-07-31 15:33:18 -07:00
  • 5ab6c1755e Code review feedback: Make RPK comments less verbose, add RPK test Kareem 2026-07-31 15:30:19 -07:00
  • 73aa1f7869 Code review feedback: improve wolfSSL_X509_STORE_get0_objects freeing logic, add test, make comments less verbose Kareem 2026-07-31 15:28:40 -07:00
  • 7489c8d86b Code review feedback: reduce comment verbosity, add DTLS test Kareem 2026-07-31 14:52:14 -07:00
  • 3aa10ae516 Always free TEMP_CAs in wolfSSL_X509_verify_cert. Thanks to Christos Papakonstantinou (Cantina Security) for the report. Kareem 2026-07-29 17:46:49 -07:00
  • 7493d84e3b Prevent unoffered types from being allowed in the RPK case. Thanks to Christos Papakonstantinou (Cantina Security) for the report. Kareem 2026-07-29 17:45:29 -07:00
  • db25c6fd34 Correct logic in X509StoreFreeObjList. Thanks to Christos Papakonstantinou (Cantina Security) for the report. Kareem 2026-07-29 17:44:28 -07:00
  • 45902b99da Only call XFREE in ShrinkOutputBuffer for dynamic buffers, and fully reset the buffer state. Thanks to Christos Papakonstantinou (Cantina Security) for the report. Kareem 2026-07-29 17:41:48 -07:00
  • 2605581791 wc_BufferKey{Encrypt,Decrypt}: restructure to single exit point Josh Holtrop 2026-08-10 12:47:34 -04:00
  • 9c4e6b04b3 wc_BufferKey{Encrypt,Decrypt}: avoid duplicate case lines across build options Josh Holtrop 2026-08-10 12:38:31 -04:00
  • 77da93945b Merge pull request #11117 from night1rider/fix/san-othername-null-memcpy JacobBarthelmeh 2026-08-10 10:25:23 -06:00
  • ecb213687c bsdkm: XATOI macro cleanup. jordan 2026-08-10 10:15:52 -05:00
  • 41c19f6aa0 bsdkm driver: wolfkdriv_aes_ctx_clear cleanup. jordan 2026-08-09 22:53:40 -05:00
  • ca292d8ac6 bsdkm driver: add missing CipherLifecycleInit call. jordan 2026-08-09 22:36:42 -05:00
  • 1e892cee21 bsdkm: wolfkmod_fpu_kern_enter and leave macro wrap. jordan 2026-08-09 22:25:21 -05:00
  • 14a72c96e4 wolfCrypt SRAM PUF: configurable error correction and footprint David Garske 2026-08-03 14:20:52 -07:00
  • 866e9e15ea asn.c: guard empty otherName copy to avoid NULL memcpy (UBSan) night1rider 2026-08-08 16:47:56 -06:00
  • 375febc944 Extend the RSA-PSS verify callback and harden the Ed448/CMAC hooks night1rider 2026-08-08 15:10:06 -06:00
  • 33e03a5ce4 Release Ed448 sign MemZero registrations on the crypto callback exit night1rider 2026-08-07 13:59:55 -06:00
  • 4d19228ca0 Cast type to CmacType so cmac.c builds as C++ night1rider 2026-08-07 13:59:55 -06:00
  • 3ade5f62b9 Clear *res before invoking the Ed448 verify crypto callback night1rider 2026-08-07 11:30:50 -06:00
  • 7952b070e6 Validate Ed448ph prehash length before the sign crypto callback night1rider 2026-08-07 11:30:50 -06:00
  • b35f60eef3 Set cmac->type before cryptocb init so wc_CmacFree can clean up night1rider 2026-08-07 11:30:50 -06:00
  • 772a62628e Add crypto callback hooks for Ed448, CMAC free, and RSA-PSS verify night1rider 2026-08-06 15:18:03 -06:00
  • a08952b557 Xilinx Versal Gen2 ASU port: decline unsupported AES-GCM IV lengths to software night1rider 2026-08-08 11:59:22 -06:00
  • 52d569855a Xilinx Versal Gen2 ASU port: fold the one-shot CMAC input into the buffer at final night1rider 2026-08-08 11:23:08 -06:00
  • 0066461776 Xilinx Versal Gen2 ASU port: split AES-CTR at the 32-bit counter wrap and carry in software to keep it on hardware night1rider 2026-08-02 16:17:54 -06:00
  • 8f5137c08a Xilinx Versal Gen2 ASU port: AES ciphers, CMAC, GMAC offload night1rider 2026-07-29 16:13:46 -06:00
  • e71b086fc8 Merge pull request #10724 from dgarske/ti_c25 philljj 2026-08-08 14:26:28 -05:00
  • 968e03e18f Merge pull request #10813 from kojo1/odbc David Garske 2026-08-08 10:57:18 -07:00
  • ca56d1178a Translate VERSION_ERROR to SSL_R_WRONG_VERSION_NUMBER in ERR_GET_REASON Takashi Kojo 2026-08-08 19:32:23 +09:00
  • e137c9f073 Move ERR_R_BUF_LIB alias to openssl/err.h Takashi Kojo 2026-08-08 18:13:23 +09:00
  • 1fb0f656b5 Use explicit NULL comparison in BIO_meth_get_* getters Takashi Kojo 2026-08-08 18:11:33 +09:00
  • c841626bfa Move WOLFSSL_-prefixed BIO type and TLS state constants out of coexist guards Takashi Kojo 2026-08-08 18:10:00 +09:00
  • 39aad36963 Use a parse-in-progress sentinel for hmac.h's evp.h include Takashi Kojo 2026-08-08 18:04:20 +09:00
  • 82f9241b49 Drop BIO_{get,set}_app_data fallback aliasing BIO_{get,set}_data Takashi Kojo 2026-08-08 17:42:25 +09:00
  • 0babeebd55 Store callback_ctrl in BIO_meth_set_callback_ctrl like OpenSSL Takashi Kojo 2026-08-08 17:37:27 +09:00
  • f73e8013c8 Make BIO_get_new_index thread-safe with atomics, add threaded test Takashi Kojo 2026-08-08 17:33:35 +09:00
  • 053523c9bb tls13: reject zero length session ticket, and add test. jordan 2026-08-07 18:02:10 -05:00
  • af9f62b690 Merge pull request #11092 from sameehj/fix/mem-fail-null-checks David Garske 2026-08-07 14:52:36 -07:00
  • 1e6604a4e9 Fix ECC OID cache lock being re-initialized Chris Conlon 2026-08-07 14:52:34 -06:00
  • f5ff44d76e Oops, add missing comma Kareem 2026-08-07 13:57:03 -07:00
  • df249bbafd Add --enable-pkcallbacks to newly added test config as the issues with --enable-all --enable-pkcallbacks are now resolved. Kareem 2026-08-06 14:02:35 -07:00
  • e899b18937 Address code review feedback. Fix passing in NULL key to PK callbacks. Fix --enable-all + TEST_PK_PRIVKEY build (DTLS and benchmark issues). Kareem 2026-08-06 13:52:50 -07:00
  • c64ae7fe40 Fix multiple issues with WOLFSSL_CHECK_SIG_FAULTS + HAVE_PK_CALLBACKS. Kareem 2026-07-28 18:15:52 -07:00
  • 1bd2ee0dd4 Merge pull request #11041 from kareem-wolfssl/zd22232_42_63 David Garske 2026-08-07 13:47:07 -07:00
  • ec0ec04531 fix: use SPDX GPL-3.0-or-later license identifiers in metadata Mark Atwood 2026-08-07 13:34:41 -07:00
  • 1520e7932a fix: validate ECC point format byte before mp_clear Mark Atwood 2026-08-07 13:34:04 -07:00
  • fdd09625c4 fix: guard RsaUnPad_PSS masking when bits==0 Mark Atwood 2026-08-07 13:34:00 -07:00
  • abd56a49f9 fix: reject zero modulus in sp mulmod/sqrmod aliased path Mark Atwood 2026-08-07 13:33:50 -07:00
  • 0e280c4f29 fix(tests): avoid unsigned underflow in DH group loop Mark Atwood 2026-08-07 13:33:26 -07:00
  • d91a5b74d9 fix: validate ML-DSA s1/s2 coefficient bounds in check key Mark Atwood 2026-08-07 12:57:51 -07:00
  • 389d99fcf2 fix: d2i_ECPrivateKey derives public key when absent from DER Mark Atwood 2026-08-07 12:57:37 -07:00
  • 91df42ec02 Merge pull request #11064 from holtrop-wolfssl/wolfssl-wolfcrypt-2.2.0 David Garske 2026-08-07 12:33:26 -07:00
  • 9ea943e34f Merge pull request #11016 from rizlik/dtls_epochs David Garske 2026-08-07 12:30:09 -07:00
  • ea57a537c7 Merge pull request #11107 from Frauschi/gate_fix David Garske 2026-08-07 12:16:29 -07:00
  • 8abc253c16 ci: name and document the three CHAR_BIT != 8 guards in ti-c2000-compile.yml David Garske 2026-08-07 12:07:42 -07:00
  • e2ddff61b7 Merge pull request #11105 from Frauschi/psk_fix David Garske 2026-08-07 11:31:32 -07:00
  • 08a7c29537 Merge pull request #11039 from danielinux/mcdc-test-coverage David Garske 2026-08-07 10:11:57 -07:00
  • 586f1ed490 Merge pull request #11096 from Frauschi/pqc_only David Garske 2026-08-07 10:08:34 -07:00
  • 032c78726f Merge pull request #10999 from embhorn/zd22154 David Garske 2026-08-07 10:01:55 -07:00
  • 41da354dc8 Add CI coverage for NO_SESSION_CACHE with session tickets Tobias Frauenschläger 2026-08-07 16:56:47 +02:00
  • c9624e3023 Ed25519 support in the OpenSSL compatibility layer Antonio Quartulli 2026-06-17 01:28:27 +02:00
  • 63eeb20302 Fix link failure with NO_SESSION_CACHE and session tickets Tobias Frauenschläger 2026-08-07 16:27:42 +02:00
  • 866fbbc66d Add transferExData parameter to wolfSSL_DupSessionEx Juliusz Sosinowicz 2026-08-07 16:33:10 +00:00
  • 560fe9f2ba Merge pull request #11099 from MarkAtwood/doc/ecc-import-raw-validation David Garske 2026-08-07 09:19:06 -07:00
  • a82f5b79c0 Merge pull request #11067 from SparkiDev/docs_user_settings_embedded_h David Garske 2026-08-07 09:14:36 -07:00
  • 96586b8f81 Merge pull request #11093 from Frauschi/fenrir_crypto David Garske 2026-08-07 09:11:42 -07:00
  • 9081c71f94 Merge pull request #11094 from Frauschi/fenrir_tls David Garske 2026-08-07 09:07:34 -07:00
  • bbdc07c1e7 Merge pull request #10786 from aidankeefe2022/fenrir-fixes-jun24/26-ak David Garske 2026-08-07 09:06:39 -07:00
  • ffcd3e2c37 Addressed Skoll comments Hideki Miyazaki 2026-08-07 23:42:21 +09:00
  • 38d95618e9 send illegal_parameter for bad serverhello supported_versions Reda Chouk 2026-08-07 15:05:07 +02:00
  • ec7d2de6a2 Send decrypt_error alert for TLS 1.3 PSK binder failures Tobias Frauenschläger 2026-08-07 11:36:27 +02:00
  • a9d58f389f Honor per-context X509_STORE_CTX verify callback Tobias Frauenschläger 2026-08-05 17:21:02 +02:00
  • f7b4dab947 Fix double free in wolfSSL_X509_EXTENSION_set_data Tobias Frauenschläger 2026-08-05 17:05:22 +02:00
  • 8b551a8c35 Send protocol_version alert when no version can be negotiated Tobias Frauenschläger 2026-08-05 16:55:14 +02:00
  • 563f0f0c13 Merge pull request #10962 from kojo1/oss_mldsa Takashi Kojo 2026-08-07 16:38:17 +09:00
  • 68972905f4 tests: repair the white-boxes that stopped building Daniele Lacamera 2026-08-06 16:33:22 +02:00
  • 1344162ce4 tests: cover the conditions master added under the campaign Daniele Lacamera 2026-08-06 07:35:53 +02:00
  • a9212acce9 tests: complete the mldsa SIMD dispatch ladder Daniele Lacamera 2026-08-06 07:19:30 +02:00
  • 1f5887183c tests: wrap the error-code operands in the sp_cortexm white-box Daniele Lacamera 2026-08-05 18:18:01 +02:00
  • 06a8f53e11 tests: correct the wc_PKCS7 reuse note in the tsp white-box Daniele Lacamera 2026-08-05 15:05:07 +02:00
  • f4a27a39fb tests: fix a codespell hit in the asn white-box Daniele Lacamera 2026-08-05 14:57:54 +02:00
  • a28499c059 tests: drive the argument-guard rows in the MC/DC white-boxes Daniele Lacamera 2026-08-05 14:47:28 +02:00
  • e79f833be3 tests: wrap error-code operands and fix the test_compress include order Daniele Lacamera 2026-08-04 23:45:08 +02:00
  • 44de2692dd tests: fix codespell hits in the MC/DC test files Daniele Lacamera 2026-08-04 19:20:47 +02:00
  • 318835b824 tests: drive the mldsa and sp_x86_64 SIMD dispatch rows Daniele Lacamera 2026-08-04 14:12:01 +02:00
  • b66da93bed tests: drive the mlkem SIMD dispatch rows Daniele Lacamera 2026-08-04 10:58:00 +02:00
  • a7e5504818 tests: assert the documented strlcpy/strlcat and PKCS7 stream contracts Daniele Lacamera 2026-08-04 08:40:22 +02:00
  • dd2ab49c24 tests: add a puf white-box for the m33mu lane Daniele Lacamera 2026-08-04 08:40:22 +02:00
  • b5c67536f9 tests: address review feedback on the Part 5 tests Daniele Lacamera 2026-08-04 06:51:54 +02:00
  • 13016c3271 tests: cover the hpke copy-private-key cleanup guard Daniele Lacamera 2026-08-04 06:42:56 +02:00
  • 877b94b661 tests: cover the sha3 vendor-gated AVX2 select and block-count guards Daniele Lacamera 2026-08-03 20:50:09 +02:00
  • f07b0c4e8c tests: drop an unused variable in the tsp white-box Daniele Lacamera 2026-08-03 20:38:40 +02:00
  • dd3ded6739 tests: make the wc_lms_impl gap white-box run in every lms variant Daniele Lacamera 2026-08-03 20:38:40 +02:00
  • 5ad0a0cc1c tests: cover the ed25519 verify-helper key guards Daniele Lacamera 2026-08-03 20:38:40 +02:00
  • ee158ca7a0 tests: add tsp and pkcs12 parse white-boxes Daniele Lacamera 2026-08-03 15:16:52 +02:00