David Garske
b077c81eb6
Merge pull request #8712 from JacobBarthelmeh/release
...
prepare for release 5.8.0
v5.8.0-stable
2025-04-24 15:10:41 -07:00
JacobBarthelmeh
e4cb69caef
remove trailing space character in changelog
2025-04-24 12:20:23 -07:00
JacobBarthelmeh
9be6a81bab
prepare for release 5.8.0
2025-04-24 10:41:40 -07:00
David Garske
81cd5df263
Fixes to support _WIN32_WCE (VS 2008 with WinCE 6.0/7.0). Should have been part of #8621 .
2025-04-24 08:18:44 -07:00
David Garske
3a1178f71c
Fix for STM32 Hash with NVIC (IRQ) enabled that can cause a DINIS interrupt that does not get cleared. If the HASH NVIC tab has Interrupts enabled it can cause an IRQ to be triggered that is not cleared. This is because the wolfSSL implementation of STM32 Hash does not call the HAL HASH API's and does not use interrupts yet. ZD 19778
2025-04-23 13:55:57 -07:00
JacobBarthelmeh
c22505a71a
Merge pull request #8700 from embhorn/rel_fixes_cs
...
Fixes from CodeSonar report
2025-04-23 11:36:15 -06:00
philljj
204d933f9f
Merge pull request #8702 from douzzer/20250422-linuxkm-tweaks
...
20250422-linuxkm-tweaks
2025-04-22 21:34:13 -05:00
Lealem Amedie
5fe086b388
Skip PKCS8 header check in wc_CreatePKCS8Key with WOLFSSL_NO_ASN_STRICT
2025-04-22 16:58:04 -06:00
Lealem Amedie
882eaa5df8
Attempt wolfssl_read_bio_file in read_bio even when XFSEEK is available
2025-04-22 16:56:32 -06:00
David Garske
68eec91f04
Merge pull request #8701 from JacobBarthelmeh/fuzz
...
init buffer before creating digest value
2025-04-22 15:20:45 -07:00
Daniel Pouzzner
1f9d0b1612
linuxkm/: fix error checking on malloc()ed values (! ptr, not IS_ERR(ptr)).
2025-04-22 17:11:52 -05:00
Daniel Pouzzner
d4fc8c3791
linuxkm/: null out pointers with PTR_ERR()-encoded values before jumping to cleanup;
...
linuxkm/lkcapi_rsa_glue.c: in km_rsa_init(), implement error-path cleanup;
linuxkm/module_hooks.c: nix CONFIG_MODULE_SIG requirement in WOLFCRYPT_FIPS_CORE_DYNAMIC_HASH_VALUE builds;
wolfssl/wolfcrypt/settings.h: in WOLFSSL_LINUXKM setup, define WOLFSSL_ASN_INT_LEAD_0_ANY if LINUXKM_LKCAPI_REGISTER (required for kernel 5.10 crypto manager);
wolfcrypt/src/memory.c: add WC_NO_ERR_TRACE() to mock error returns in SAVE_VECTOR_REGISTERS2_fuzzer().
2025-04-22 16:44:07 -05:00
JacobBarthelmeh
43cdc1be74
init buffer before creating digest value
2025-04-22 14:34:16 -06:00
Eric Blankenhorn
66b9256f86
Fixes from CodeSonar report
2025-04-22 14:43:01 -05:00
Daniel Pouzzner
e6f8de7d31
Merge pull request #8699 from JacobBarthelmeh/bn
...
revert BN_CTX_init stub for older applications
2025-04-22 14:21:01 -05:00
Ruby Martin
a1cb6e5ba5
only test msys system, add buffer typecasts
2025-04-22 12:35:12 -06:00
Daniel Pouzzner
25cd009a42
Merge pull request #8695 from JacobBarthelmeh/coverity
...
null derefernce sanity checks and control flow issue
2025-04-22 11:37:51 -05:00
JacobBarthelmeh
9da9817f89
move test case to the correct location for stub macro guard
2025-04-22 10:09:01 -06:00
JacobBarthelmeh
b22cc12c8d
add missing BN_CTX_init define
2025-04-22 09:29:28 -06:00
JacobBarthelmeh
33da20c3ec
revert BN_CTX_init stub for older applications
2025-04-22 09:22:40 -06:00
David Garske
3ca444e0e1
Merge pull request #8697 from douzzer/20250419-test_dtls13_ack_order-uninited-read
...
20250419-test_dtls13_ack_order-uninited-read
2025-04-19 19:44:35 -07:00
Daniel Pouzzner
bbbed009b2
tests/api/test_dtls.c: fix read of uninited data in test_dtls13_ack_order().
2025-04-19 01:57:51 -05:00
Daniel Pouzzner
9e5c064d5d
Merge pull request #8679 from kojiws/keep_header_on_pkcs12_parse
...
Add wc_PKCS12_parse_ex() to keep PKCS8 header
2025-04-19 01:57:21 -05:00
Daniel Pouzzner
543ba268a4
Merge pull request #8558 from julek-wolfssl/openssh-9.9-fix
...
wolfSSL_EVP_PKEY_cmp: only compare the public keys
2025-04-19 01:51:49 -05:00
philljj
3cdc521d33
Merge pull request #8696 from douzzer/20250418-linuxkm-lkcapi-cleanup
...
20250418-linuxkm-lkcapi-cleanup
2025-04-18 20:19:36 -05:00
Daniel Pouzzner
2e31cad4f6
wolfssl/internal.h: clean up WOLFSSL_TEST_VIS comments and an unneeded attr on GetOutputBuffer().
2025-04-18 18:27:07 -05:00
Daniel Pouzzner
fe244fb41b
linuxkm: clean up LKCAPI glue:
...
typography fixes;
static attr on const byte arrays;
refactor km_ecdsa_verify() to use a single heap allocation;
fix linuxkm_test_ecdsa_nist_driver() to copy sig and hash to a heap allocation before passing to sg_set_buf() (avoids unmapping of rodata);
in linuxkm_test_pkcs1_driver() move hash from stack to heap;
add LINUX_VERSION_CODE >= 5.4 assertion in linuxkm/lkcapi_glue.c;
streamline macro logic in linuxkm/lkcapi_sha_glue.c.
2025-04-18 18:21:57 -05:00
JacobBarthelmeh
d481086910
restore internal hashes pointer on error, CID 515542
2025-04-18 16:52:25 -06:00
JacobBarthelmeh
69a4607f84
null sanity check on arguments in wc_HpkeContextComputeNonce, CID 515543
2025-04-18 16:47:36 -06:00
JacobBarthelmeh
f834b9b08a
add null sanity check to wolfSSL_SESSION_get_max_early_data, CID 516264
2025-04-18 16:31:33 -06:00
JacobBarthelmeh
73c286ae46
fix possible null dereference, CID 518681
2025-04-18 16:02:46 -06:00
JacobBarthelmeh
a21542cdfc
Merge pull request #8689 from julek-wolfssl/gh/8666
...
dtls13: send acks with correct record number order
2025-04-18 15:50:56 -06:00
philljj
c41407111a
Merge pull request #8694 from douzzer/20250411-linuxkm-SHA
...
20250411-linuxkm-SHA
2025-04-18 16:45:55 -05:00
Juliusz Sosinowicz
43c564d48b
dtls13: send acks with correct record number order
2025-04-18 14:56:59 -05:00
Daniel Pouzzner
74232f5fe7
Merge pull request #8631 from julek-wolfssl/gh/8579-2
...
dtls13: additional epoch checks
2025-04-18 14:49:00 -05:00
Daniel Pouzzner
8c0b931459
Merge pull request #8652 from kareem-wolfssl/zd19563_2
...
Add some FPKI test OIDs which are currently being used in DoD JITC certificates.
2025-04-18 14:04:29 -05:00
Daniel Pouzzner
0430d25cfb
linuxkm shims for all SHA and SHA-HMAC flavors.
2025-04-18 11:57:29 -05:00
Daniel Pouzzner
f7407e4065
20250411-linuxkm-SHA checkpoint
2025-04-18 11:57:29 -05:00
gojimmypi
1f88ab58c1
Fix Arduino progmem print, AVR WOLFSSL_USER_IO
2025-04-18 14:29:32 +02:00
Koji Takeda
2e02274be7
Add guard macro
2025-04-18 08:08:25 +09:00
David Garske
1b240e2cbc
Merge pull request #8693 from kareem-wolfssl/forum8313
...
Fix unused function warning for wc_AesDecrypt when building with STM32.
2025-04-17 15:39:32 -07:00
Koji Takeda
039ff1b460
Add wc_PKCS12_parse_ex()
2025-04-18 06:39:16 +09:00
Kareem
645da33176
Fix unused function warning for wc_AesDecrypt when building with STM32.
...
This function is not needed for AES-CCM, as the AES-CCM decrypt function only calls wc_AesEncrypt.
2025-04-17 14:33:44 -07:00
Daniel Pouzzner
5e1f713995
Merge pull request #8691 from lealem47/ecc521_minSz
...
Fix SetMinEccKey_Sz to allow for P-521 minimum
2025-04-17 14:31:56 -05:00
Kareem
038eab61d0
Add additional FPKI test OIDs.
2025-04-17 11:29:36 -07:00
Kareem
686ae22af2
Add additional FPKI test OIDs to FPKI test cert.
2025-04-17 11:14:40 -07:00
Kareem
00a6c3953c
Add some FPKI test OIDs which are currently being used in DoD JITC certificates.
2025-04-17 11:10:35 -07:00
Juliusz Sosinowicz
e709cb4cf2
_Dtls13HandshakeRecv: cast handshakeType
2025-04-17 19:21:59 +02:00
philljj
cb1a35ac7d
Merge pull request #8690 from douzzer/20250417-LINUXKM_DIRECT_RSA
...
20250417-LINUXKM_DIRECT_RSA
2025-04-17 11:26:09 -05:00
Juliusz Sosinowicz
f6f295e29f
fixup! dtls13: additional epoch checks
2025-04-17 18:18:44 +02:00