Albert Ribes
6f8e0f128a
Support CFLAGS="-Wno-shadow"
...
Avoid appending "-Wshadow" in the end of compiler flags if the user
provided CFLAGS="-Wno-shadow"
2025-07-21 12:34:39 +02:00
Albert Ribes
b2463f167c
Avoid bogus warning on uninitialized variables on old versions of GCC
...
gcc-4.3.3 erroneously complains that some variables may be used
uninitialized. Silence it assigning NULL on declaration, as is already
done with many other variables.
2025-07-21 10:57:50 +02:00
Albert Ribes
2e25c65129
wolfcrypt test: Fix build on 32 bit machines
...
Declare a 64 bit variable using W64LIT to avoid warnings on 32 bit
machines
2025-07-21 10:34:19 +02:00
Josh Holtrop
06d86af67c
Add API to decode SymmetricKeyPackage and OneSymmetricKey CMS objects
2025-07-19 18:28:06 -04:00
jordan
8e46687223
dual alg certs: add missing WC_ENABLE_ASYM_KEY_IMPORT guard.
2025-07-18 09:30:17 -05:00
Hideki Miyazaki
7a03b9fea6
fix trailing whitespaces
2025-07-18 07:54:45 +09:00
Hideki Miyazaki
70587dd2d5
Addressed code review by devin
2025-07-18 07:51:04 +09:00
David Garske
decea12e22
Merge pull request #9012 from JacobBarthelmeh/release
...
prepare for release 5.8.2
v5.8.2-stable
2025-07-17 14:59:24 -07:00
jordan
e571988059
dual alg certs: fix dual alg certs build, and asn cleanup.
2025-07-17 15:15:11 -05:00
Colton Willey
f3ee192a96
Set out ptr properly for RSA pad crypto cb inline
2025-07-17 12:01:39 -07:00
JacobBarthelmeh
c34e6ab8d9
prepare for release 5.8.2
2025-07-17 10:26:19 -06:00
JacobBarthelmeh
fa1842e56d
Merge pull request #9011 from douzzer/20250717-linuxkm-include-am
...
20250717-linuxkm-include-am
2025-07-17 08:56:40 -06:00
Daniel Pouzzner
c8a9e9ea12
linuxkm/include.am: add linuxkm/wolfcrypt.lds to EXTRA_DIST.
2025-07-17 08:40:55 -05:00
Hideki Miyazaki
ba358b8fb8
Sanity check before free
2025-07-17 18:51:57 +09:00
Hideki Miyazaki
59659ef8fb
fix long line and trailing whitespaces
2025-07-17 18:26:55 +09:00
Hideki Miyazaki
cc123d7c3a
Make properties related to SCE TLS hidden
...
- Fix RSA Crypt callback
- Eliminate WOLFSSL_LOCAL
2025-07-17 18:16:40 +09:00
philljj
8bde512676
Merge pull request #9007 from douzzer/20250715-linuxkm-portability-fixes
...
20250715-linuxkm-portability-fixes
2025-07-16 21:02:55 -05:00
gojimmypi
a08b93347f
Revised sockets for USE_WOLFSSL_IO, USE_WOLFSSL_IO
2025-07-16 15:18:14 -07:00
Daniel Pouzzner
8d1289c1d7
linuxkm/Kbuild: --rename-section .rodata.cst16=.rodata.wolfcrypt
2025-07-16 16:54:20 -05:00
gojimmypi
66650a95d8
Improve WOLFSSL_USER_IO defaults
2025-07-16 12:04:05 -07:00
Daniel Pouzzner
01313cc0c8
linuxkm/x86_vector_register_glue.c:
...
* refactor the save_vector_registers_x86() algorithm to depend directly on preempt_count(), and use local_bh_enable() and preempt_disable() directly, to mitigate glitchiness around irq_fpu_usable() and crypto_simd_usable();
* eliminate the WC_FPU_ALREADY_FLAG kludge.
* improve the error and warning messages, and add some additional checks and messages for unexpected states; add VRG_PR_ERR_X and VRG_PR_WARN_X for pr_*_once() semantics on regular builds, but unlimited messages when WOLFSSL_LINUXKM_VERBOSE_DEBUG.
linuxkm/linuxkm_wc_port.h and linuxkm/module_hooks.c:
* move the spinlock-based implementation of wc_LockMutex() from linuxkm_wc_port.h to module_hooks.c, due to numerous stuboorn direct external symbol references;
* extensively refactor the kernel header #include strategy, keeping many more superfluous headers out of __PIE__ objects, and fixing unavoidable static header functions with grafted __always_inline attributes;
* add version exceptions for RHEL 9.5.
linuxkm/Kbuild:
* on x86 with CONFIG_MITIGATION_{RETPOLINE,RETHUNK}, use inline rethunks rather than none;
* refactor check for "Error: section(s) missed by containerization." using `readelf --sections --syms`, for 100% coverage, more informative error output, and suppression of false positives on printk-related cruft;
configure.ac and linuxkm/lkcapi_sha_glue.c: use LINUXKM_LKCAPI_[DONT_]REGISTER_{SHA,HMAC}_ALL to represent --enable-linuxkm-lkcapi-register=[-]all-{sha,hmac}, which allows alg families (notably SHA1) to be masked out piecemeal;
linuxkm/lkcapi_rsa_glue.c: in linuxkm_test_pkcs1pad_driver(), mitigate unused args when LINUXKM_AKCIPHER_NO_SIGNVERIFY.
2025-07-16 13:09:03 -05:00
JacobBarthelmeh
2c90d1585a
Merge pull request #8897 from anhu/compat_additions
...
Compatibility layer additions for X.509 extensions and RSA PSS
2025-07-15 10:52:33 -06:00
Anthony Hu
c341a9fc05
FIPS > 2
2025-07-15 07:59:20 -04:00
JacobBarthelmeh
e06f1bbf02
Merge pull request #9005 from douzzer/20250714-linuxkm-MODULE_LICENSE
...
20250714-linuxkm-MODULE_LICENSE
2025-07-14 17:23:22 -06:00
JacobBarthelmeh
9430c8a5a1
Merge pull request #9003 from embhorn/cov_531298
...
Fix blake2b_final coverity reports
2025-07-14 16:20:19 -06:00
Daniel Pouzzner
049e88b525
linuxkm/module_hooks.c: use MODULE_LICENSE("GPL").
2025-07-14 16:30:13 -05:00
Josh Holtrop
af3296a836
wc_PKCS7_KeyWrap(): mark pointers as to const and check for NULL
2025-07-14 17:28:23 -04:00
Daniel Pouzzner
2c341a5806
Merge pull request #8990 from JacobBarthelmeh/license
...
updating license from GPLv2 to GPLv3
(linuxkm tweak to `MODULE_LICENSE("GPL")` to follow.)
2025-07-14 16:14:39 -05:00
JacobBarthelmeh
91321fccec
Merge pull request #8992 from douzzer/20250710-WC_ASN_RUNTIME_DATE_CHECK_CONTROL
...
20250710-WC_ASN_RUNTIME_DATE_CHECK_CONTROL
2025-07-14 15:08:35 -06:00
Eric Blankenhorn
9c2ea12563
Fix blake2 final coverity issue
2025-07-14 15:04:15 -05:00
Josh Holtrop
429ccd5456
Add callback functions for custom AES key wrap/unwrap operations
2025-07-14 15:58:14 -04:00
Eric Blankenhorn
efdca85aec
Fix blake2 final coverity issue
2025-07-14 14:53:37 -05:00
philljj
1f71e6d246
Merge pull request #8998 from douzzer/20250712-linuxkm-all-aes-sha-hmac
...
20250712-linuxkm-all-aes-sha-hmac
2025-07-14 14:19:09 -05:00
philljj
bbc5dc528b
Merge pull request #9001 from douzzer/20250714-linuxkm-fix-page-flags-h
...
20250714-linuxkm-fix-page-flags-h
2025-07-14 12:59:26 -05:00
Daniel Pouzzner
80c9212dd9
linuxkm/linuxkm_wc_port.h, linuxkm/lkcapi_aes_glue.c, configure.ac: fix LKCAPI on kernel 5.4 (sunrise version for LKCAPI), and add all-aes, all-sha, all-hmac, and their negations, to --enable-linuxkm-lkcapi-register.
2025-07-14 12:39:41 -05:00
Daniel Pouzzner
ee3b459e16
linuxkm/linuxkm_wc_port.h: refactor the fix for folio_flags()/const_folio_flags() text segment spam -- inhibiting inclusion of linux/page-flags.h breaks on some kernel configs.
2025-07-14 10:27:35 -05:00
JacobBarthelmeh
99d26f0347
Merge pull request #8977 from BridgerVoss/new_settings
...
FREESCALE forced algorithm HAVE_ECC moved to IDE/MQX/user_settings.h
2025-07-14 09:05:56 -06:00
Hideki Miyazaki
ec252a73e2
fix whitespace and long line
2025-07-12 10:26:28 +09:00
Hideki Miyazaki
eb8a3afe38
Addressed code review comments
2025-07-12 09:49:09 +09:00
Anthony Hu
dc3209b797
Add macro to .wolfssl_known_macro_extras
2025-07-11 14:59:43 -04:00
Kareem
9fa1d2e75f
Enforce WOLFSSL_MAX_PATH_LEN for ASN original as well.
2025-07-11 11:53:33 -07:00
Anthony Hu
1a0a3283a0
Add a test.
2025-07-11 14:32:47 -04:00
philljj
607d5d798b
Merge pull request #8994 from douzzer/20250711-linuxkm-distro-fix
...
20250711-linuxkm-distro-fix
2025-07-11 13:01:51 -05:00
Daniel Pouzzner
d90394efa6
wolfcrypt/src/asn.c and wolfssl/wolfcrypt/asn.h: add
...
WC_ASN_RUNTIME_DATE_CHECK_CONTROL, with accessors wc_AsnSetSkipDateCheck()
(WOLFSSL_TEST_VIS) and wc_AsnGetSkipDateCheck() (WOLFSSL_LOCAL). use this to
permafix test_wolfSSL_CRL_duplicate_extensions() in api.c, which has an
expiring-soon handcrafted certificate in it.
2025-07-11 11:25:25 -05:00
David Garske
70bdd9f990
Merge pull request #8989 from rlm2002/zd20212
...
xmemset rng before test runs
2025-07-11 08:58:30 -07:00
David Garske
a36f9085c1
Fix for compat wolfSSL_RSA_sign and wolfSSL_RSA_verify to support RSA PSS with custom salt and mgf1 hash type. Adds compat API's for i2d_PrivateKey_bio , BN_ucmp and X509v3_get_ext_by_NID. ZD 20059
2025-07-11 08:51:51 -07:00
Daniel Pouzzner
0001bf7983
linuxkm/patches/: in regen-patches.sh, structure the pathnames to mollify kernel scripts/checkpatch.pl;
...
tweak WOLFSSL_LINUXKM_HAVE_GET_RANDOM_CALLBACKS-6v15.patch (mostly whitespace) to mollify scripts/checkpatch.pl.
2025-07-11 10:42:43 -05:00
Daniel Pouzzner
1e3966f06d
linuxkm/include.am: add kernel patches to EXTRA_DIST.
2025-07-11 10:42:43 -05:00
Hideki Miyazaki
c4a178f029
Remove trailing whitespace
2025-07-11 22:12:49 +09:00
Hideki Miyazaki
e9def03585
Null check before accessing instance
2025-07-11 17:48:36 +09:00