WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity
25,169 Commits
27 Branches
168 Tags
358 MiB
Commit Graph

25169 Commits (e4cb69caefe4d67f004214f587cf33295ccf919c)

Author SHA1 Message Date
JacobBarthelmeh e4cb69caef remove trailing space character in changelog 2025-04-24 12:20:23 -07:00
JacobBarthelmeh 9be6a81bab prepare for release 5.8.0 2025-04-24 10:41:40 -07:00
JacobBarthelmeh c22505a71a
Merge pull request #8700 from embhorn/rel_fixes_cs 
Fixes from CodeSonar report
 2025-04-23 11:36:15 -06:00
philljj 204d933f9f
Merge pull request #8702 from douzzer/20250422-linuxkm-tweaks 
20250422-linuxkm-tweaks
 2025-04-22 21:34:13 -05:00
David Garske 68eec91f04
Merge pull request #8701 from JacobBarthelmeh/fuzz 
init buffer before creating digest value
 2025-04-22 15:20:45 -07:00
Daniel Pouzzner 1f9d0b1612 linuxkm/: fix error checking on malloc()ed values (! ptr, not IS_ERR(ptr)). 2025-04-22 17:11:52 -05:00
Daniel Pouzzner d4fc8c3791 linuxkm/: null out pointers with PTR_ERR()-encoded values before jumping to cleanup; 
linuxkm/lkcapi_rsa_glue.c: in km_rsa_init(), implement error-path cleanup;

linuxkm/module_hooks.c: nix CONFIG_MODULE_SIG requirement in WOLFCRYPT_FIPS_CORE_DYNAMIC_HASH_VALUE builds;

wolfssl/wolfcrypt/settings.h: in WOLFSSL_LINUXKM setup, define WOLFSSL_ASN_INT_LEAD_0_ANY if LINUXKM_LKCAPI_REGISTER (required for kernel 5.10 crypto manager);

wolfcrypt/src/memory.c: add WC_NO_ERR_TRACE() to mock error returns in SAVE_VECTOR_REGISTERS2_fuzzer().
 2025-04-22 16:44:07 -05:00
JacobBarthelmeh 43cdc1be74 init buffer before creating digest value 2025-04-22 14:34:16 -06:00
Eric Blankenhorn 66b9256f86 Fixes from CodeSonar report 2025-04-22 14:43:01 -05:00
Daniel Pouzzner e6f8de7d31
Merge pull request #8699 from JacobBarthelmeh/bn 
revert BN_CTX_init stub for older applications
 2025-04-22 14:21:01 -05:00
Daniel Pouzzner 25cd009a42
Merge pull request #8695 from JacobBarthelmeh/coverity 
null derefernce sanity checks and control flow issue
 2025-04-22 11:37:51 -05:00
JacobBarthelmeh 9da9817f89 move test case to the correct location for stub macro guard 2025-04-22 10:09:01 -06:00
JacobBarthelmeh b22cc12c8d add missing BN_CTX_init define 2025-04-22 09:29:28 -06:00
JacobBarthelmeh 33da20c3ec revert BN_CTX_init stub for older applications 2025-04-22 09:22:40 -06:00
David Garske 3ca444e0e1
Merge pull request #8697 from douzzer/20250419-test_dtls13_ack_order-uninited-read 
20250419-test_dtls13_ack_order-uninited-read
 2025-04-19 19:44:35 -07:00
Daniel Pouzzner bbbed009b2 tests/api/test_dtls.c: fix read of uninited data in test_dtls13_ack_order(). 2025-04-19 01:57:51 -05:00
Daniel Pouzzner 9e5c064d5d
Merge pull request #8679 from kojiws/keep_header_on_pkcs12_parse 
Add wc_PKCS12_parse_ex() to keep PKCS8 header
 2025-04-19 01:57:21 -05:00
Daniel Pouzzner 543ba268a4
Merge pull request #8558 from julek-wolfssl/openssh-9.9-fix 
wolfSSL_EVP_PKEY_cmp: only compare the public keys
 2025-04-19 01:51:49 -05:00
philljj 3cdc521d33
Merge pull request #8696 from douzzer/20250418-linuxkm-lkcapi-cleanup 
20250418-linuxkm-lkcapi-cleanup
 2025-04-18 20:19:36 -05:00
Daniel Pouzzner 2e31cad4f6 wolfssl/internal.h: clean up WOLFSSL_TEST_VIS comments and an unneeded attr on GetOutputBuffer(). 2025-04-18 18:27:07 -05:00
Daniel Pouzzner fe244fb41b linuxkm: clean up LKCAPI glue: 
typography fixes;

static attr on const byte arrays;

refactor km_ecdsa_verify() to use a single heap allocation;

fix linuxkm_test_ecdsa_nist_driver() to copy sig and hash to a heap allocation before passing to sg_set_buf() (avoids unmapping of rodata);

in linuxkm_test_pkcs1_driver() move hash from stack to heap;

add LINUX_VERSION_CODE >= 5.4 assertion in linuxkm/lkcapi_glue.c;

streamline macro logic in linuxkm/lkcapi_sha_glue.c.
 2025-04-18 18:21:57 -05:00
JacobBarthelmeh d481086910 restore internal hashes pointer on error, CID 515542 2025-04-18 16:52:25 -06:00
JacobBarthelmeh 69a4607f84 null sanity check on arguments in wc_HpkeContextComputeNonce, CID 515543 2025-04-18 16:47:36 -06:00
JacobBarthelmeh f834b9b08a add null sanity check to wolfSSL_SESSION_get_max_early_data, CID 516264 2025-04-18 16:31:33 -06:00
JacobBarthelmeh 73c286ae46 fix possible null dereference, CID 518681 2025-04-18 16:02:46 -06:00
JacobBarthelmeh a21542cdfc
Merge pull request #8689 from julek-wolfssl/gh/8666 
dtls13: send acks with correct record number order
 2025-04-18 15:50:56 -06:00
philljj c41407111a
Merge pull request #8694 from douzzer/20250411-linuxkm-SHA 
20250411-linuxkm-SHA
 2025-04-18 16:45:55 -05:00
Juliusz Sosinowicz 43c564d48b dtls13: send acks with correct record number order 2025-04-18 14:56:59 -05:00
Daniel Pouzzner 74232f5fe7
Merge pull request #8631 from julek-wolfssl/gh/8579-2 
dtls13: additional epoch checks
 2025-04-18 14:49:00 -05:00
Daniel Pouzzner 8c0b931459
Merge pull request #8652 from kareem-wolfssl/zd19563_2 
Add some FPKI test OIDs which are currently being used in DoD JITC certificates.
 2025-04-18 14:04:29 -05:00
Daniel Pouzzner 0430d25cfb linuxkm shims for all SHA and SHA-HMAC flavors. 2025-04-18 11:57:29 -05:00
Daniel Pouzzner f7407e4065 20250411-linuxkm-SHA checkpoint 2025-04-18 11:57:29 -05:00
Koji Takeda 2e02274be7 Add guard macro 2025-04-18 08:08:25 +09:00
David Garske 1b240e2cbc
Merge pull request #8693 from kareem-wolfssl/forum8313 
Fix unused function warning for wc_AesDecrypt when building with STM32.
 2025-04-17 15:39:32 -07:00
Koji Takeda 039ff1b460 Add wc_PKCS12_parse_ex() 2025-04-18 06:39:16 +09:00
Kareem 645da33176 Fix unused function warning for wc_AesDecrypt when building with STM32. 
This function is not needed for AES-CCM, as the AES-CCM decrypt function only calls wc_AesEncrypt.
 2025-04-17 14:33:44 -07:00
Daniel Pouzzner 5e1f713995
Merge pull request #8691 from lealem47/ecc521_minSz 
Fix SetMinEccKey_Sz to allow for P-521 minimum
 2025-04-17 14:31:56 -05:00
Kareem 038eab61d0 Add additional FPKI test OIDs. 2025-04-17 11:29:36 -07:00
Kareem 686ae22af2 Add additional FPKI test OIDs to FPKI test cert. 2025-04-17 11:14:40 -07:00
Kareem 00a6c3953c Add some FPKI test OIDs which are currently being used in DoD JITC certificates. 2025-04-17 11:10:35 -07:00
Juliusz Sosinowicz e709cb4cf2 _Dtls13HandshakeRecv: cast handshakeType 2025-04-17 19:21:59 +02:00
philljj cb1a35ac7d
Merge pull request #8690 from douzzer/20250417-LINUXKM_DIRECT_RSA 
20250417-LINUXKM_DIRECT_RSA
 2025-04-17 11:26:09 -05:00
Juliusz Sosinowicz f6f295e29f fixup! dtls13: additional epoch checks 2025-04-17 18:18:44 +02:00
Daniel Pouzzner 775bbacce6
Merge pull request #8688 from miyazakh/client_pqc_option 
Make client pqc option consistency with server
 2025-04-17 11:18:41 -05:00
Juliusz Sosinowicz 3cba5c6dc1 fixup! dtls13: additional epoch checks 2025-04-17 18:18:01 +02:00
Juliusz Sosinowicz 3f560036d6 dtls13: additional epoch checks 2025-04-17 18:18:01 +02:00
Daniel Pouzzner b533d082b0
Merge pull request #8678 from embhorn/zd19742 
Fix types.h for MSVC6.0
 2025-04-17 11:12:09 -05:00
Lealem Amedie 1b80c03fe9 Change to short type 2025-04-17 10:05:40 -06:00
Daniel Pouzzner 44adc4a71d linuxkm/lkcapi_rsa_glue.c: gate LINUXKM_DIRECT_RSA directly on WC_RSA_NO_PADDING; 
configure.ac: always pass -DWC_RSA_NO_PADDING for --enable-linuxkm-lkcapi-register=rsa or =all.
 2025-04-17 10:38:45 -05:00
JacobBarthelmeh ce67d8cd07
Merge pull request #8687 from douzzer/20250417-fix-test_mldsa_pkcs8 
20250417-fix-test_mldsa_pkcs8
 2025-04-17 08:56:57 -06:00