ba358b8fb8
Sanity check before free
2025-07-17 18:51:57 +09:00
59659ef8fb
fix long line and trailing whitespaces
2025-07-17 18:26:55 +09:00
cc123d7c3a
Make properties related to SCE TLS hidden
...
- Fix RSA Crypt callback
- Eliminate WOLFSSL_LOCAL
2025-07-17 18:16:40 +09:00
8bde512676
Merge pull request #9007 from douzzer/20250715-linuxkm-portability-fixes
...
20250715-linuxkm-portability-fixes
2025-07-16 21:02:55 -05:00
a08b93347f
Revised sockets for USE_WOLFSSL_IO, USE_WOLFSSL_IO
2025-07-16 15:18:14 -07:00
8d1289c1d7
linuxkm/Kbuild: --rename-section .rodata.cst16=.rodata.wolfcrypt
2025-07-16 16:54:20 -05:00
66650a95d8
Improve WOLFSSL_USER_IO defaults
2025-07-16 12:04:05 -07:00
01313cc0c8
linuxkm/x86_vector_register_glue.c:
...
* refactor the save_vector_registers_x86() algorithm to depend directly on preempt_count(), and use local_bh_enable() and preempt_disable() directly, to mitigate glitchiness around irq_fpu_usable() and crypto_simd_usable();
* eliminate the WC_FPU_ALREADY_FLAG kludge.
* improve the error and warning messages, and add some additional checks and messages for unexpected states; add VRG_PR_ERR_X and VRG_PR_WARN_X for pr_*_once() semantics on regular builds, but unlimited messages when WOLFSSL_LINUXKM_VERBOSE_DEBUG.
linuxkm/linuxkm_wc_port.h and linuxkm/module_hooks.c:
* move the spinlock-based implementation of wc_LockMutex() from linuxkm_wc_port.h to module_hooks.c, due to numerous stuboorn direct external symbol references;
* extensively refactor the kernel header #include strategy, keeping many more superfluous headers out of __PIE__ objects, and fixing unavoidable static header functions with grafted __always_inline attributes;
* add version exceptions for RHEL 9.5.
linuxkm/Kbuild:
* on x86 with CONFIG_MITIGATION_{RETPOLINE,RETHUNK}, use inline rethunks rather than none;
* refactor check for "Error: section(s) missed by containerization." using `readelf --sections --syms`, for 100% coverage, more informative error output, and suppression of false positives on printk-related cruft;
configure.ac and linuxkm/lkcapi_sha_glue.c: use LINUXKM_LKCAPI_[DONT_]REGISTER_{SHA,HMAC}_ALL to represent --enable-linuxkm-lkcapi-register=[-]all-{sha,hmac}, which allows alg families (notably SHA1) to be masked out piecemeal;
linuxkm/lkcapi_rsa_glue.c: in linuxkm_test_pkcs1pad_driver(), mitigate unused args when LINUXKM_AKCIPHER_NO_SIGNVERIFY.
2025-07-16 13:09:03 -05:00
2c90d1585a
Merge pull request #8897 from anhu/compat_additions
...
Compatibility layer additions for X.509 extensions and RSA PSS
2025-07-15 10:52:33 -06:00
c341a9fc05
FIPS > 2
2025-07-15 07:59:20 -04:00
e06f1bbf02
Merge pull request #9005 from douzzer/20250714-linuxkm-MODULE_LICENSE
...
20250714-linuxkm-MODULE_LICENSE
2025-07-14 17:23:22 -06:00
9430c8a5a1
Merge pull request #9003 from embhorn/cov_531298
...
Fix blake2b_final coverity reports
2025-07-14 16:20:19 -06:00
049e88b525
linuxkm/module_hooks.c: use MODULE_LICENSE("GPL").
2025-07-14 16:30:13 -05:00
af3296a836
wc_PKCS7_KeyWrap(): mark pointers as to const and check for NULL
2025-07-14 17:28:23 -04:00
2c341a5806
Merge pull request #8990 from JacobBarthelmeh/license
...
updating license from GPLv2 to GPLv3
(linuxkm tweak to `MODULE_LICENSE("GPL")` to follow.)
2025-07-14 16:14:39 -05:00
91321fccec
Merge pull request #8992 from douzzer/20250710-WC_ASN_RUNTIME_DATE_CHECK_CONTROL
...
20250710-WC_ASN_RUNTIME_DATE_CHECK_CONTROL
2025-07-14 15:08:35 -06:00
9c2ea12563
Fix blake2 final coverity issue
2025-07-14 15:04:15 -05:00
429ccd5456
Add callback functions for custom AES key wrap/unwrap operations
2025-07-14 15:58:14 -04:00
efdca85aec
Fix blake2 final coverity issue
2025-07-14 14:53:37 -05:00
1f71e6d246
Merge pull request #8998 from douzzer/20250712-linuxkm-all-aes-sha-hmac
...
20250712-linuxkm-all-aes-sha-hmac
2025-07-14 14:19:09 -05:00
bbc5dc528b
Merge pull request #9001 from douzzer/20250714-linuxkm-fix-page-flags-h
...
20250714-linuxkm-fix-page-flags-h
2025-07-14 12:59:26 -05:00
80c9212dd9
linuxkm/linuxkm_wc_port.h, linuxkm/lkcapi_aes_glue.c, configure.ac: fix LKCAPI on kernel 5.4 (sunrise version for LKCAPI), and add all-aes, all-sha, all-hmac, and their negations, to --enable-linuxkm-lkcapi-register.
2025-07-14 12:39:41 -05:00
ee3b459e16
linuxkm/linuxkm_wc_port.h: refactor the fix for folio_flags()/const_folio_flags() text segment spam -- inhibiting inclusion of linux/page-flags.h breaks on some kernel configs.
2025-07-14 10:27:35 -05:00
99d26f0347
Merge pull request #8977 from BridgerVoss/new_settings
...
FREESCALE forced algorithm HAVE_ECC moved to IDE/MQX/user_settings.h
2025-07-14 09:05:56 -06:00
ec252a73e2
fix whitespace and long line
2025-07-12 10:26:28 +09:00
eb8a3afe38
Addressed code review comments
2025-07-12 09:49:09 +09:00
dc3209b797
Add macro to .wolfssl_known_macro_extras
2025-07-11 14:59:43 -04:00
9fa1d2e75f
Enforce WOLFSSL_MAX_PATH_LEN for ASN original as well.
2025-07-11 11:53:33 -07:00
1a0a3283a0
Add a test.
2025-07-11 14:32:47 -04:00
607d5d798b
Merge pull request #8994 from douzzer/20250711-linuxkm-distro-fix
...
20250711-linuxkm-distro-fix
2025-07-11 13:01:51 -05:00
d90394efa6
wolfcrypt/src/asn.c and wolfssl/wolfcrypt/asn.h: add
...
WC_ASN_RUNTIME_DATE_CHECK_CONTROL, with accessors wc_AsnSetSkipDateCheck()
(WOLFSSL_TEST_VIS) and wc_AsnGetSkipDateCheck() (WOLFSSL_LOCAL). use this to
permafix test_wolfSSL_CRL_duplicate_extensions() in api.c, which has an
expiring-soon handcrafted certificate in it.
2025-07-11 11:25:25 -05:00
70bdd9f990
Merge pull request #8989 from rlm2002/zd20212
...
xmemset rng before test runs
2025-07-11 08:58:30 -07:00
a36f9085c1
Fix for compat wolfSSL_RSA_sign and wolfSSL_RSA_verify to support RSA PSS with custom salt and mgf1 hash type. Adds compat API's for i2d_PrivateKey_bio , BN_ucmp and X509v3_get_ext_by_NID. ZD 20059
2025-07-11 08:51:51 -07:00
0001bf7983
linuxkm/patches/: in regen-patches.sh, structure the pathnames to mollify kernel scripts/checkpatch.pl;
...
tweak WOLFSSL_LINUXKM_HAVE_GET_RANDOM_CALLBACKS-6v15.patch (mostly whitespace) to mollify scripts/checkpatch.pl.
2025-07-11 10:42:43 -05:00
1e3966f06d
linuxkm/include.am: add kernel patches to EXTRA_DIST.
2025-07-11 10:42:43 -05:00
c4a178f029
Remove trailing whitespace
2025-07-11 22:12:49 +09:00
e9def03585
Null check before accessing instance
2025-07-11 17:48:36 +09:00
0a0b9a3c24
Make properties related to TLS handshake hidden for TSIP TLS user context structure
2025-07-11 14:25:06 +09:00
388eea3cf2
Merge pull request #8976 from holtrop/decode-encrypted-key-package
...
Add wc_PKCS7_DecodeEncryptedKeyPackage()
2025-07-10 17:08:06 -06:00
01cd91cbea
removing more locations of WOLFSSL_API used with function implementations
2025-07-10 16:44:28 -06:00
046e46a67f
Merge pull request #8825 from kareem-wolfssl/zd19911
...
Fix parsing RPK with no parameters.
2025-07-11 08:36:55 +10:00
8d68977e33
Merge pull request #8985 from sebastian-carpenter/GH-issue-8951
...
improper access of sp_int_minimal using sp_int
2025-07-10 15:21:20 -07:00
e65647faa8
xmemset rng before test runs
2025-07-10 16:17:53 -06:00
4d4228caa1
Merge pull request #8815 from kareem-wolfssl/zd19929
...
Fix wolfSSL_BIO_new_connect's handling of IPV6 addresses.
2025-07-10 15:17:39 -07:00
629c5b4cf6
updating license from GPLv2 to GPLv3
2025-07-10 16:11:36 -06:00
362f0a2cfd
Ensure only one of the RPK algorithm parameters are set.
2025-07-10 12:43:14 -07:00
13b8a972ea
remove WOLFSSL_API in source code when already used in header file for function decleration
2025-07-10 13:40:27 -06:00
3ce8c6e4fa
Remove WOLFSSL_API for wc_PKCS7_DecodeEncryptedKeyPackage() in source file
2025-07-10 15:29:31 -04:00
f776c95e54
Remove do/while(0) loop in wc_PKCS7_DecodeEncryptedKeyPackage(); use if-else if chain
2025-07-10 15:25:57 -04:00
f942990113
Fix building unit tests with --enable-rpk --disable-rsa.
...
Exact configure line used:
./configure --enable-kyber --enable-mlkem --enable-dilithium --enable-dtls --enable-dtls13 --enable-dtls-frag-ch --enable-debug --enable-debug-trace-errcodes \
CFLAGS="-DHAVE_RPK -DWOLFSSL_DER_LOAD -DWOLFSSL_LOGGINGENABLED_DEFAULT=1" --disable-rsa
2025-07-10 12:03:18 -07:00
Hideki Miyazaki
philljj
gojimmypi
Daniel Pouzzner
JacobBarthelmeh
Anthony Hu
Josh Holtrop
Eric Blankenhorn
Kareem
David Garske
Sean Parkinson
Ruby Martin