1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-27 04:49:34 +03:00

Commit Graph

  • ec4146a8e3 fix F-680: ECDH Init Error Paths Leak RNG Resource Daniel Pouzzner 2026-06-12 16:35:53 -05:00
  • cac0f231db fix F-679: HMAC Finup Memory Leak on Update Failure Daniel Pouzzner 2026-06-12 16:26:13 -05:00
  • 3057314f65 fix F-678: SHA3 Finup Memory Leak on Update Failure Daniel Pouzzner 2026-06-12 16:25:12 -05:00
  • 38c2477cbb fix F-677: SHA3 Init Memory Leak on wc_InitSha3 Failure Daniel Pouzzner 2026-06-12 16:17:38 -05:00
  • 85091c7d06 fix F-676: Missing ForceZero on RSA Decrypted Plaintext Buffer Daniel Pouzzner 2026-06-12 16:07:06 -05:00
  • 1df8d453c9 fix F-3948: Missing KAT mismatch check in aes_xts_256_test partial block encrypt path Daniel Pouzzner 2026-06-12 15:11:41 -05:00
  • 21a57cf003 Fixes for Fenrir items: F-1880: Unsigned word32 dec_len Silently Wraps Negative wc_RsaSSL_Verify Error Codes, Returning Wrong Errno on RSA Signature Verification Failure F-1881: word32 sig_len Silently Wraps Negative wc_RsaSSL_Sign Error in Self-Test Functions, Bypassing <= 0 Guard F-1882: word32 priv_len / pub_len Silently Wrap Negative wc_RsaKeyToDer / wc_RsaKeyToPublicDer Errors Across Three RSA Self-Test Functions Daniel Pouzzner 2026-06-12 14:01:30 -05:00
  • b3cb06e98a fix F-1426: PTR_ERR on malloc Results Always Yields 0 in AES-GCM Self-Test Error Messages Daniel Pouzzner 2026-06-11 18:17:07 -05:00
  • 8c1013ad52 fix F-1425: PTR_ERR on malloc Result Always Yields 0 in Error Message Daniel Pouzzner 2026-06-11 17:11:02 -05:00
  • 682a09d5a7 fix F-1424: Sysfs Node Resource Leak When Second Install Fails Daniel Pouzzner 2026-06-11 17:09:07 -05:00
  • f48efe5bfc fix F-705: Missing wc_RsaSetRNG in sig_alg km_pkcs1_set_pub After Key Re-Init Daniel Pouzzner 2026-06-11 16:48:19 -05:00
  • 9c1d9c164b fix F-673: Wrong sizeof Type in Allocation Failure Error Message Daniel Pouzzner 2026-06-11 16:30:42 -05:00
  • 1c9abac6f5 fix F-672: Copy-Paste Duplicate: pkcs1_sha384 Unregistered Twice in Both RSA Paths Daniel Pouzzner 2026-06-11 16:18:04 -05:00
  • 546ac0ac36 linuxkm/lkcapi_aes_glue.c: clean up pr_err()s on allocation failures. Daniel Pouzzner 2026-06-11 10:20:10 -05:00
  • 86ba8f7770 Merge pull request #10652 from SparkiDev/regression_fixes_25 JacobBarthelmeh 2026-06-12 16:30:57 -06:00
  • bfef92c343 Merge pull request #10656 from holtrop-wolfssl/f-4427 David Garske 2026-06-12 15:30:07 -07:00
  • e4b7b67f06 Merge pull request #10674 from Frauschi/cert_chain_fix David Garske 2026-06-12 14:10:13 -07:00
  • 445b8b272c Document PUBLIC_KEY_E return value for wc_ed448_export_public() in source comment Josh Holtrop 2026-06-12 15:58:13 -04:00
  • 8c1e3a261f Fix Ed448/25519 export private-only key unit tests for FIPS pre-v7 Josh Holtrop 2026-06-12 15:15:07 -04:00
  • daa22e9fb9 Document PUBLIC_KEY_E return for wc_ed448_export_public() Josh Holtrop 2026-06-12 15:01:27 -04:00
  • 955ffb92d3 Free RNG from updated Ed448/Ed25519 unit tests Josh Holtrop 2026-06-12 10:24:12 -04:00
  • 2914a85741 Document PUBLIC_KEY_E error return from wc_edXXX_export_key() Josh Holtrop 2026-06-12 08:40:54 -04:00
  • 92500e728f Preserve Ed25519/448 PublicKeyToDer unit testing for BUFFER_E Josh Holtrop 2026-06-12 08:35:08 -04:00
  • 6270029cc4 Fix wc_Ed25519PublicKeyToDer doxygen documentation Josh Holtrop 2026-06-12 08:34:51 -04:00
  • 3d517841d5 Ed448: check for public key presence on export Josh Holtrop 2026-06-10 15:10:18 -04:00
  • f420c66c38 Fix aes_siv_negative_test unit test style for skoll Josh Holtrop 2026-06-12 14:46:43 -04:00
  • fb80740738 Merge pull request #10664 from JacobBarthelmeh/nightly David Garske 2026-06-12 10:55:49 -07:00
  • 5bc5251c3e Dynamically find AES-SIV test vector index instead of hardcoding in unit test Josh Holtrop 2026-06-12 12:23:16 -04:00
  • d9ca55e5c0 the examples pem.c --padding flag does not need gated behind WOLFSSL_DER_TO_PEM JacobBarthelmeh 2026-06-11 11:52:56 -06:00
  • 7064eeca89 Force-zero output buffer for AES-SIV decrypt for other AES errors as well Josh Holtrop 2026-06-12 12:19:06 -04:00
  • 6081106ae3 Merge pull request #10647 from philljj/misc_fixes David Garske 2026-06-12 09:13:26 -07:00
  • 2f7b8b23d8 Merge pull request #10672 from philljj/genseed_fortest David Garske 2026-06-12 08:44:25 -07:00
  • 5c1225e6ab x509: harden wolfSSL_X509_verify_cert() against alloc failure and stack pollution Tobias Frauenschläger 2026-06-11 20:47:22 +02:00
  • 2d76a68925 x509: reject depth-exhausted chains in wolfSSL_X509_verify_cert() Tobias Frauenschläger 2026-06-11 16:07:04 +02:00
  • 3e2c46001e x509: require a trusted anchor in wolfSSL_X509_verify_cert() Tobias Frauenschläger 2026-06-03 11:28:24 +02:00
  • f7ad60cb8d Merge pull request #10667 from julek-wolfssl/ci-parallel-make-check David Garske 2026-06-12 07:53:34 -07:00
  • 742a0267f2 trackmemory: raise timeout to 40 min for wolfEntropy runtime variance Juliusz Sosinowicz 2026-06-12 14:12:56 +02:00
  • 20571a9beb Force-zero wc_AesSivDecrypt*() output buffer on authentication failure Josh Holtrop 2026-06-11 16:02:57 -04:00
  • 6d1d750ad3 parallel-make-check: reserved names, type hints, readability Juliusz Sosinowicz 2026-06-12 13:39:28 +02:00
  • 1b3a1ef6a6 Fix CI: register JSON-config CPPFLAGS macros in .wolfssl_known_macro_extras Juliusz Sosinowicz 2026-06-12 02:15:49 +00:00
  • 85d3bc2380 parallel-make-check: drop the --jobs option Juliusz Sosinowicz 2026-06-11 23:42:17 +00:00
  • 12597308de smoke-test, os-check: pin CCACHE_DIR to the cached path Juliusz Sosinowicz 2026-06-11 23:06:59 +00:00
  • 1f6abed28e CI hardening: stamp under set -e, SIGKILL escalation for fail-fast Juliusz Sosinowicz 2026-06-11 20:48:19 +00:00
  • eb59a12b36 parallel-make-check: close the fail-fast race, contain callable errors Juliusz Sosinowicz 2026-06-11 20:28:31 +00:00
  • a62884599b CI review fixes: JSON validation, log volume, rm -rf, flag spelling Juliusz Sosinowicz 2026-06-11 19:50:33 +00:00
  • 3a6c31a51e CI: pool the per-config runner matrices into parallel make-check jobs Juliusz Sosinowicz 2026-06-11 17:13:58 +00:00
  • 351b775fd4 Merge pull request #10665 from anhu/mlkem-keygen-zeroize Tobias Frauenschläger 2026-06-12 08:41:16 +02:00
  • ab09d0c95b misc_fixes: cleanup for skoll review. jordan 2026-06-12 00:12:45 -05:00
  • 3e390b1b29 Merge pull request #10666 from douzzer/20260611-AES-XTS-key-half-inequality Daniel Pouzzner 2026-06-11 21:55:37 -05:00
  • b495180e01 settings.h: don't set WOLFSSL_GENSEED_FORTEST. jordan 2026-06-11 20:50:35 -05:00
  • 3c34a97164 Merge pull request #10603 from aidangarske/pqc-decode-validation Sean Parkinson 2026-06-12 09:22:12 +10:00
  • 29f14ed2ee Merge pull request #10582 from julek-wolfssl/fenrir-20260602 David Garske 2026-06-11 15:29:51 -07:00
  • 74c3b50080 Merge pull request #10669 from night1rider/Zephyr-4-4-0-PRB-fix David Garske 2026-06-11 15:29:27 -07:00
  • aa7b7defba Switch to use merge branch for PR testing instead of HEAD Branch night1rider 2026-06-11 15:57:29 -06:00
  • 744d25fdc3 Merge pull request #10648 from aidankeefe2022/fix-Der-to-Oid-coversion Aidan Keefe 2026-06-11 15:12:53 -06:00
  • 0097739dd8 fixes for F-3325: Daniel Pouzzner 2026-06-11 15:38:28 -05:00
  • e68cc75ecd F-5813: clarify BuildMessage sequence-number wrap comment Juliusz Sosinowicz 2026-06-11 19:22:36 +00:00
  • 108afdf1c3 F-5633: use explicit NULL comparison in FreeCiphers Juliusz Sosinowicz 2026-06-11 19:22:36 +00:00
  • 5e76c66977 F-5818: don't invalidate the session on an unauthenticated alert Juliusz Sosinowicz 2026-06-11 19:22:35 +00:00
  • 2352d73f7f F-5811: defer resumed-session consistency checks to confirmed resumption Juliusz Sosinowicz 2026-06-11 19:22:35 +00:00
  • 0eea017a8b Zeroize some private data before releasing memory Anthony Hu 2026-06-11 14:05:37 -04:00
  • bd78a42e9a Merge pull request #10097 from kareem-wolfssl/gh9936 David Garske 2026-06-11 10:25:41 -07:00
  • 4b8fd23ae7 Merge pull request #10606 from miyazakh/fix_tls_bench_dtls David Garske 2026-06-11 10:12:45 -07:00
  • 262a2e199a Merge pull request #10662 from Frauschi/zephyr_4_4_fixes David Garske 2026-06-11 09:51:11 -07:00
  • e0324866bc Merge pull request #10654 from douzzer/20260610-ssl_api_ext-revert-ret-cascades David Garske 2026-06-11 09:49:08 -07:00
  • 514e39e2f5 test: wrap PUBLIC_KEY_E comparisons in WC_NO_ERR_TRACE for ML-KEM/ML-DSA decode tests aidan garske 2026-06-11 09:35:03 -07:00
  • b1330f75d9 Merge pull request #10658 from douzzer/20260608-linuxkm-fenrir philljj 2026-06-11 11:19:46 -05:00
  • a1bdacbb83 ML-DSA: reject private key with out-of-range s1/s2 coefficients on decode aidan garske 2026-06-04 15:36:32 -07:00
  • 477754024d ML-KEM: FIPS 203 modulus check - reject non-reduced private key vector on decode aidan garske 2026-06-04 15:24:10 -07:00
  • c73afe67a5 Fixes for Zephyr 4.4 Tobias Frauenschläger 2026-06-11 12:41:37 +02:00
  • b04f573e20 Regression testing fixes - memory allocation failure testing Sean Parkinson 2026-06-10 14:33:35 +10:00
  • 20dadc8d86 Addressed code review Hideki Miyazaki 2026-06-11 08:38:00 +09:00
  • 486e8eefc0 .wolfssl_known_macro_extras: fix lexical order. Daniel Pouzzner 2026-06-10 17:32:20 -05:00
  • 0f3d3bedb0 fix F-5334: AEAD decrypt accepts ciphertext shorter than authentication tag before unsigned length subtraction Daniel Pouzzner 2026-06-10 14:37:53 -05:00
  • e98a03b80e fix F=3524: Heap Buffer Overflow in km_direct_rsa_dec When req->dst_len < ctx->key_len Daniel Pouzzner 2026-06-10 14:11:50 -05:00
  • 1e888383bb fix F-3025: Missing buffer-length validation in km_ecdh_decode_secret enables out-of-bounds read Daniel Pouzzner 2026-06-10 13:02:35 -05:00
  • 9b723b9e11 fix F-3024: Missing buffer-length validation in km_dh_decode_secret enables out-of-bounds read Daniel Pouzzner 2026-06-10 13:02:15 -05:00
  • b4139b1a90 fix F-706: AES-CTR and AES-OFB Encrypt Leak Aes Context Containing Key Schedule on skcipher_walk_done Error Daniel Pouzzner 2026-06-09 17:31:21 -05:00
  • afc2137351 fix F-682: Incorrect tolower/toupper Macros Produce Wrong Results for Non-Alpha Characters Daniel Pouzzner 2026-06-09 16:57:17 -05:00
  • c9cc79f9ae cleanup inspired by false positive F-675: AES-CTR and AES-OFB Modes Bypass WC_C_DYNAMIC_FALLBACK Selection Logic Daniel Pouzzner 2026-06-09 15:07:53 -05:00
  • da1b7fe236 fixes for F-674: Non-Constant-Time memcmp in RSA PKCS#1 v1.5 Signature Verification Daniel Pouzzner 2026-06-09 09:59:36 -05:00
  • ad98438baa fixes for F-5335: ECDH overflow paths do not report the required output length F-5336: RSA PKCS#1 overflow paths do not report the required output length Daniel Pouzzner 2026-06-08 18:15:51 -05:00
  • 67c1d65ef7 fixes for F-2554 Missing wc_ecc_free Before free in km_ecdh_init When wc_ecc_set_rng Fails F-2555 Missing wc_FreeDhKey Before free in km_ffdhe_init When wc_DhSetNamedKey Fails Daniel Pouzzner 2026-06-08 18:07:38 -05:00
  • 05fc258ca2 fix F-1423: AES-XTS Encrypt/Decrypt Missing skcipher_walk Cleanup on 6 Early-Return Error Paths Daniel Pouzzner 2026-06-08 18:01:51 -05:00
  • 19a9670aaa fix F-1234: IS_ERR Used on NULL-Returning Kernel Crypto Request Allocation Functions. Daniel Pouzzner 2026-06-08 17:37:13 -05:00
  • 63fd322382 Merge pull request #10641 from rlm2002/zd21890 Sean Parkinson 2026-06-11 08:01:20 +10:00
  • d56fa7972d Merge pull request #10639 from julek-wolfssl/fix-current-cipher-kx-nid David Garske 2026-06-10 14:50:02 -07:00
  • 2ba2e389c6 address copilot comments Thomas Cook 2026-06-10 17:44:47 -04:00
  • 748678715a F-5807: extend EMS resumption check to ticket resumption Juliusz Sosinowicz 2026-06-10 20:28:59 +00:00
  • 7926d9dea4 dsa: fix fips gating in api tests. jordan 2026-06-10 14:10:21 -05:00
  • b810bba09b added case to handel when second arc of byte encoding is greater than 39 when first arc is 2 Aidan Keefe 2026-06-09 11:54:44 -06:00
  • 1b78eff3cd Revert moving SIZEOF_LONG and SIZEOF_LONG_LONG to fix a build issue with Windows FIPS ready. Instead add detection for SIZEOF_LONG == 8 in types.h. Kareem 2026-06-08 17:15:58 -07:00
  • d3d5824bcb Fix HAVE_LIMITS_H definition in CMake. Also move SIZEOF_LONG and SIZEOF_LONG_LONG definitions to options.h. Kareem 2026-05-28 14:30:09 -07:00
  • d263987bfd Move HAVE_LIMITS_H outside of WOLFSSL_OPTIONS_IGNORE_SYS. Kareem 2026-04-29 16:15:27 -07:00
  • a11ab0e46b Define HAVE_LIMITS_H in options.h rather than config.h since types.h depends on this definition and config.h isn't consistently available at runtime. Fixes #9936. Kareem 2026-03-27 17:01:02 -07:00
  • fdfb0a9fe7 Merge pull request #10627 from julek-wolfssl/fenrir-fixes-20260601-dtls13-recv-epoch David Garske 2026-06-10 10:06:26 -07:00
  • 10e2afa20a Merge pull request #10595 from miyazakh/f5381_RSASSA-PSS_trailerField David Garske 2026-06-10 10:05:22 -07:00
  • 37511b484e tests/api/test_ssl_cert.c, tests/api/test_ssl_ext.c, tests/api/test_ssl_pk.c: add missing gates on !NO_TLS. Daniel Pouzzner 2026-06-10 12:04:06 -05:00
  • 4ce3baa307 wolfssl/ssl.h: add !NO_TLS gate around prototypes for wolf*_{client,server}_method*() to induce compile-time failures for TLS/SSL usage in NO_TLS configurations. Daniel Pouzzner 2026-06-10 12:03:46 -05:00
  • 03825c17f8 src/ssl_api_ext.c and src/ssl_api_pk.c: restore early BAD_FUNC_ARG returns that were refactored away in 359e688dc3, fixing null pointer deref regression in wolfSSL_UseALPN() (possibly others too). Daniel Pouzzner 2026-06-10 11:33:05 -05:00