Lealem Amedie
0e8aab241d
Sniffer: Fix infinte recursion caused by an OOO appData packet
2025-07-31 09:31:59 -06:00
philljj
65126352a0
Merge pull request #9025 from douzzer/20250721-wolfssl_linuxkm_pie_redirect_table-direct
...
20250721-wolfssl_linuxkm_pie_redirect_table-direct
2025-07-22 18:08:11 -05:00
Daniel Pouzzner
6043274d96
linuxkm/Kbuild: revert change to base PIE_FLAGS -- we need -fno-stack-protector to avoid compiler-generated references to __stack_chk_fail.
2025-07-22 16:45:06 -05:00
David Garske
c7bc6e834e
Merge pull request #8996 from lealem47/match_ipv6
...
Add logic to match IPv6 domain addresses
2025-07-22 13:42:15 -07:00
Daniel Pouzzner
c26f6ded14
linuxkm/linuxkm_wc_port.h: use more flexible logic to define WC_LKM_INDIRECT_SYM(), allowing various overrides and orthogonalizing the definitions proper, and add explanatory comments.
2025-07-22 14:40:45 -05:00
David Garske
357b624ca5
Merge pull request #9024 from JacobBarthelmeh/mldsa
...
fix mldsa test case for buffer size and expire date
2025-07-22 11:04:41 -07:00
David Garske
b0fd0296f3
Merge pull request #9026 from JacobBarthelmeh/readme
...
fix changelog formatting
2025-07-22 09:34:44 -07:00
Lealem Amedie
22b01bcda9
Remove unnecessary memset
2025-07-22 10:05:36 -06:00
JacobBarthelmeh
3759c6f1a1
fix changelog formatting
2025-07-22 09:21:26 -06:00
Sean Parkinson
8f00fc2594
Merge pull request #8890 from kareem-wolfssl/zd20022
...
Allow larger pathLen values in Basic Constraints.
2025-07-22 17:16:27 +10:00
Sean Parkinson
cd7256ae63
Merge pull request #8979 from anhu/abort_on_bad_legacy
...
Abort TLS connection if legacy version field is TLS 1.3 or higher
2025-07-22 17:12:39 +10:00
Sean Parkinson
1f72866489
Merge pull request #8993 from miyazakh/tsip_tlsproperties_uc
...
Make properties related to TLS handshake hidden for TSIP TLS user-context structure
2025-07-22 17:05:44 +10:00
Sean Parkinson
6c847b1870
Merge pull request #9013 from ColtonWilley/fix_cryptocb_rsa_pad_inline
...
Set out ptr properly for RSA pad crypto cb inline
2025-07-22 16:47:06 +10:00
Sean Parkinson
21f283c143
Merge pull request #9008 from gojimmypi/pr-wolfssl_user_io
...
Improve WOLFSSL_USER_IO defaults
2025-07-22 16:37:59 +10:00
Sean Parkinson
7417958649
Merge pull request #9015 from philljj/fix_dual_alg_build
...
dual alg certs: fix dual alg certs build, and asn cleanup.
2025-07-22 16:26:41 +10:00
Sean Parkinson
95768038b9
Merge pull request #9019 from ribes96/word64_literal
...
wolfcrypt test: Fix build on 32 bit machines
2025-07-22 16:23:02 +10:00
Sean Parkinson
0c4c156893
Merge pull request #9020 from ribes96/oldgcc_uninitialized
...
Avoid bogus warning on uninitialized variables on old versions of GCC
2025-07-22 16:22:00 +10:00
Sean Parkinson
f034f09bb4
Merge pull request #9021 from ribes96/fix_noshadow_overwrite
...
Support CFLAGS="-Wno-shadow"
2025-07-22 16:21:07 +10:00
Sean Parkinson
f1175043f3
Merge pull request #9022 from lealem47/check_rsa_u
...
Check that u value isn't zero in RsaFunctionPrivate
2025-07-22 16:19:12 +10:00
Daniel Pouzzner
0495f2cc20
linuxkm/linuxkm_wc_port.h: add WC_LKM_INDIRECT_SYM() macro; on x86, use wolfssl_linuxkm_pie_redirect_table directly for indirect calls from PIE container, otherwise use wolfssl_linuxkm_get_pie_redirect_table() to avoid e.g. R_AARCH64_LD64_GOT_LO12_NC relocations;
...
linuxkm/Kbuild: remove -fno-stack-protector from default PIE_FLAGS.
2025-07-21 19:34:00 -05:00
JacobBarthelmeh
98c70fb77e
fix mldsa test case for buffer size and expire date
2025-07-21 15:15:31 -06:00
Lealem Amedie
8df20d6966
Check that u value isn't zero in RsaFunctionPrivate
2025-07-21 10:45:43 -06:00
Lealem Amedie
b306e88d1a
Guard for WOLFSSL_USER_IO case
2025-07-21 10:06:19 -06:00
Lealem Amedie
f9afdfd8e2
Don't need to initialize with {0}
2025-07-21 10:06:19 -06:00
Lealem Amedie
90bd374c16
Add logic to match IPv6 domain addresses
2025-07-21 10:06:19 -06:00
Albert Ribes
6f8e0f128a
Support CFLAGS="-Wno-shadow"
...
Avoid appending "-Wshadow" in the end of compiler flags if the user
provided CFLAGS="-Wno-shadow"
2025-07-21 12:34:39 +02:00
Albert Ribes
b2463f167c
Avoid bogus warning on uninitialized variables on old versions of GCC
...
gcc-4.3.3 erroneously complains that some variables may be used
uninitialized. Silence it assigning NULL on declaration, as is already
done with many other variables.
2025-07-21 10:57:50 +02:00
Albert Ribes
2e25c65129
wolfcrypt test: Fix build on 32 bit machines
...
Declare a 64 bit variable using W64LIT to avoid warnings on 32 bit
machines
2025-07-21 10:34:19 +02:00
jordan
8e46687223
dual alg certs: add missing WC_ENABLE_ASYM_KEY_IMPORT guard.
2025-07-18 09:30:17 -05:00
David Garske
decea12e22
Merge pull request #9012 from JacobBarthelmeh/release
...
prepare for release 5.8.2
2025-07-17 14:59:24 -07:00
jordan
e571988059
dual alg certs: fix dual alg certs build, and asn cleanup.
2025-07-17 15:15:11 -05:00
Colton Willey
f3ee192a96
Set out ptr properly for RSA pad crypto cb inline
2025-07-17 12:01:39 -07:00
JacobBarthelmeh
c34e6ab8d9
prepare for release 5.8.2
2025-07-17 10:26:19 -06:00
JacobBarthelmeh
fa1842e56d
Merge pull request #9011 from douzzer/20250717-linuxkm-include-am
...
20250717-linuxkm-include-am
2025-07-17 08:56:40 -06:00
Daniel Pouzzner
c8a9e9ea12
linuxkm/include.am: add linuxkm/wolfcrypt.lds to EXTRA_DIST.
2025-07-17 08:40:55 -05:00
Hideki Miyazaki
ba358b8fb8
Sanity check before free
2025-07-17 18:51:57 +09:00
philljj
8bde512676
Merge pull request #9007 from douzzer/20250715-linuxkm-portability-fixes
...
20250715-linuxkm-portability-fixes
2025-07-16 21:02:55 -05:00
gojimmypi
a08b93347f
Revised sockets for USE_WOLFSSL_IO, USE_WOLFSSL_IO
2025-07-16 15:18:14 -07:00
Daniel Pouzzner
8d1289c1d7
linuxkm/Kbuild: --rename-section .rodata.cst16=.rodata.wolfcrypt
2025-07-16 16:54:20 -05:00
gojimmypi
66650a95d8
Improve WOLFSSL_USER_IO defaults
2025-07-16 12:04:05 -07:00
Daniel Pouzzner
01313cc0c8
linuxkm/x86_vector_register_glue.c:
...
* refactor the save_vector_registers_x86() algorithm to depend directly on preempt_count(), and use local_bh_enable() and preempt_disable() directly, to mitigate glitchiness around irq_fpu_usable() and crypto_simd_usable();
* eliminate the WC_FPU_ALREADY_FLAG kludge.
* improve the error and warning messages, and add some additional checks and messages for unexpected states; add VRG_PR_ERR_X and VRG_PR_WARN_X for pr_*_once() semantics on regular builds, but unlimited messages when WOLFSSL_LINUXKM_VERBOSE_DEBUG.
linuxkm/linuxkm_wc_port.h and linuxkm/module_hooks.c:
* move the spinlock-based implementation of wc_LockMutex() from linuxkm_wc_port.h to module_hooks.c, due to numerous stuboorn direct external symbol references;
* extensively refactor the kernel header #include strategy, keeping many more superfluous headers out of __PIE__ objects, and fixing unavoidable static header functions with grafted __always_inline attributes;
* add version exceptions for RHEL 9.5.
linuxkm/Kbuild:
* on x86 with CONFIG_MITIGATION_{RETPOLINE,RETHUNK}, use inline rethunks rather than none;
* refactor check for "Error: section(s) missed by containerization." using `readelf --sections --syms`, for 100% coverage, more informative error output, and suppression of false positives on printk-related cruft;
configure.ac and linuxkm/lkcapi_sha_glue.c: use LINUXKM_LKCAPI_[DONT_]REGISTER_{SHA,HMAC}_ALL to represent --enable-linuxkm-lkcapi-register=[-]all-{sha,hmac}, which allows alg families (notably SHA1) to be masked out piecemeal;
linuxkm/lkcapi_rsa_glue.c: in linuxkm_test_pkcs1pad_driver(), mitigate unused args when LINUXKM_AKCIPHER_NO_SIGNVERIFY.
2025-07-16 13:09:03 -05:00
JacobBarthelmeh
2c90d1585a
Merge pull request #8897 from anhu/compat_additions
...
Compatibility layer additions for X.509 extensions and RSA PSS
2025-07-15 10:52:33 -06:00
Anthony Hu
c341a9fc05
FIPS > 2
2025-07-15 07:59:20 -04:00
JacobBarthelmeh
e06f1bbf02
Merge pull request #9005 from douzzer/20250714-linuxkm-MODULE_LICENSE
...
20250714-linuxkm-MODULE_LICENSE
2025-07-14 17:23:22 -06:00
JacobBarthelmeh
9430c8a5a1
Merge pull request #9003 from embhorn/cov_531298
...
Fix blake2b_final coverity reports
2025-07-14 16:20:19 -06:00
Daniel Pouzzner
049e88b525
linuxkm/module_hooks.c: use MODULE_LICENSE("GPL").
2025-07-14 16:30:13 -05:00
Daniel Pouzzner
2c341a5806
Merge pull request #8990 from JacobBarthelmeh/license
...
updating license from GPLv2 to GPLv3
(linuxkm tweak to `MODULE_LICENSE("GPL")` to follow.)
2025-07-14 16:14:39 -05:00
JacobBarthelmeh
91321fccec
Merge pull request #8992 from douzzer/20250710-WC_ASN_RUNTIME_DATE_CHECK_CONTROL
...
20250710-WC_ASN_RUNTIME_DATE_CHECK_CONTROL
2025-07-14 15:08:35 -06:00
Eric Blankenhorn
9c2ea12563
Fix blake2 final coverity issue
2025-07-14 15:04:15 -05:00
Eric Blankenhorn
efdca85aec
Fix blake2 final coverity issue
2025-07-14 14:53:37 -05:00
