Daniel Pouzzner
ae4b33c997
linuxkm/linuxkm_wc_port.h: when HAVE_LINUXKM_PIE_SUPPORT, map
...
WOLFSSL_TEXT_SEGMENT_CANONICALIZER() to wc_linuxkm_normalize_relocations(), and
define WOLFSSL_TEXT_SEGMENT_CANONICALIZER_BUFSIZ to 8192.
linuxkm/module_hooks.c: in wc_linuxkm_normalize_relocations(), add checks for
out-of-order offsets.
2025-09-08 16:43:34 -05:00
philljj
bdc1f890c8
Merge pull request #9168 from douzzer/20250905-linuxkm-pie-cst32
...
20250905-linuxkm-pie-cst32
2025-09-06 11:25:33 -05:00
Daniel Pouzzner
8a7331776a
linuxkm/Kbuild: for PIE containerization, add .rodata.cst32 to the move list.
2025-09-05 17:55:24 -05:00
David Garske
48385884c0
Merge pull request #9167 from gojimmypi/pr-fix-watcom-setld80bit
...
Pin Watcom compiler in workflow to 2025-09-01-Build
2025-09-05 13:33:31 -07:00
gojimmypi
5c2f90968f
Pin Watcom compiler in workflow to 2025-09-01-Build
2025-09-05 12:57:58 -07:00
David Garske
4d1fa1b012
Merge pull request #9160 from douzzer/20250903-PR8329-rework
...
20250903-PR8329-rework
2025-09-04 09:43:53 -07:00
Daniel Pouzzner
ee2e63444d
wolfcrypt/src/sha512.c: don't remap ByteReverseWords64(), remove ByteReverseWords64_1() inline asm macro, and refactor Sha512FinalRaw() and wc_Sha384FinalRaw() to write directly to the output buffer when possible.
2025-09-03 22:16:15 -05:00
Sean Parkinson
5108dcd0d6
Merge pull request #9157 from rlm2002/coverity
...
move pathLengthSet assignment
2025-09-04 08:35:16 +10:00
lealem47
e29b65d22b
Merge pull request #9140 from dgarske/sniffer_partialoverlap
...
Improve sniffer detection of partial overlap
2025-09-03 14:12:44 -06:00
David Garske
095fd88cbe
Merge pull request #9091 from gojimmypi/pr-arduino-testing
...
Improve Arduino Examples
2025-09-03 11:09:13 -07:00
gojimmypi
0065d9a0dd
Improve Arduino Examples, add workflow testing
2025-09-02 11:45:28 -07:00
philljj
f33814b377
Merge pull request #9151 from douzzer/20250830-linuxkm-fix-get_drbg
...
20250830-linuxkm-fix-get_drbg
2025-09-02 11:39:25 -05:00
Ruby Martin
4d5e1d0dfe
move pathLegthSet assignment
2025-09-02 10:09:11 -06:00
David Garske
6dd626de0c
Improve detection of partial overlap (ZD 20369)
2025-09-02 07:51:30 -07:00
Daniel Pouzzner
aa96c352d4
add !WC_SKIP_INCLUDED_C_FILES gates in indirectly compiled files in linuxkm/, to avoid false positive unknownMacro reports from cppcheck-force-source.
2025-08-30 14:15:55 -05:00
Daniel Pouzzner
f8e4feb633
wolfssl/wolfcrypt/error-crypt.h: in WC_ERR_TRACE() definition, use WOLFSSL_DEBUG_PRINTF_FN(WOLFSSL_DEBUG_PRINTF_FIRST_ARGS, not WOLFSSL_DEBUG_PRINTF(, for compatibility with WOLF_NO_VARIADIC_MACROS.
2025-08-30 12:54:22 -05:00
Daniel Pouzzner
7df8ee4081
linuxkm/linuxkm_wc_port.h: add default setup for LINUXKM_LKCAPI_REGISTER_HASH_DRBG_DEFAULT, to make visibility in random.c;
...
linuxkm/lkcapi_sha_glue.c: revert f7c7ac275a (get_drbg() DISABLE_VECTOR_REGISTERS() for crypto_default_rng) -- compiler/inlining bug makes it break on at least one target, so caller needs to retain responsibility;
linuxkm/x86_vector_register_glue.c: in wc_save_vector_registers_x86(), always return WC_ACCEL_INHIBIT_E if already fpu_state & WC_FPU_INHIBITED_FLAG, for safe+correct dynamics on recursive calls.
2025-08-30 12:08:57 -05:00
David Garske
7ef94284cc
Merge pull request #9149 from douzzer/20250829-_mlkem_decompress_5_avx2-movzwq
...
20250829-_mlkem_decompress_5_avx2-movzwq
2025-08-29 16:23:16 -07:00
Daniel Pouzzner
8ed1ce6a8b
wolfcrypt/src/wc_mlkem_asm.S: in _mlkem_decompress_5_avx2, use movzwq, not movzxw, for portability.
2025-08-29 14:42:48 -05:00
David Garske
330d6ad5a6
Merge pull request #9083 from mgrojo/bugfix/ada-overflow-check-error-string
...
Ada: fix wrapping of `wolfSSL_ERR_error_string_n`
2025-08-29 11:28:16 -07:00
David Garske
24bbb38a9a
Merge pull request #9120 from effbiae/print-debug
...
replace (f)printf with WOLFSSL_DEBUG_PRINTF
2025-08-29 11:26:44 -07:00
David Garske
c2885cf0b9
Merge pull request #9147 from douzzer/20250828-WC_SVR_FLAG_INHIBIT-recursive
...
20250828-WC_SVR_FLAG_INHIBIT-recursive
2025-08-29 11:25:03 -07:00
mgrojo
cdbad34284
Ada: include use of WolfSSL.Get_Error in the example
2025-08-29 09:57:04 -07:00
mgrojo
a0c8efdffe
Ada: fix wrapping of wolfSSL_ERR_error_string_n
...
Use unchecked conversion instead of type conversion to mimic C style
conversion from int to unsigned long, avoiding the Ada overflow check that is raised when a negative value is converted to an unsigned type.
2025-08-29 09:57:04 -07:00
effbiae
44c403f4c7
replace (f)printf with WOLFSSL_DEBUG_PRINTF
2025-08-29 12:34:22 +10:00
Daniel Pouzzner
f7c7ac275a
linuxkm/linuxkm_wc_port.h and linuxkm/x86_vector_register_glue.c: refactor
...
wc_save_vector_registers_x86() and wc_restore_vector_registers_x86() to allow
recursive WC_SVR_FLAG_INHIBIT while already in a vector save context;
linuxkm/lkcapi_sha_glue.c: in get_drbg() and put_drbg(),
DISABLE_VECTOR_REGISTERS()...REENABLE_VECTOR_REGISTERS() if tfm ==
crypto_default_rng.
2025-08-28 11:02:45 -05:00
Sean Parkinson
0224ef3d2e
Merge pull request #9146 from rlm2002/gh9128_MEM_ZERO
...
ForceZero change for WOLFSSL_CHECK_MEM_ZERO
2025-08-28 22:37:55 +10:00
Ruby Martin
8b1422a869
add configuration for WOLFSSL_MEM_CHECK_ZERO
2025-08-27 16:12:57 -06:00
Ruby Martin
11942e774c
do not abort MEM_ZERO check if TEST_ALWAYS_RUN_TO_END is defined
2025-08-27 15:04:49 -06:00
Ruby Martin
1ad8b2897a
Force zero with bufferSize instead of length. add void prototype to definitions
2025-08-27 14:56:51 -06:00
David Garske
344f127e64
Merge pull request #9129 from effbiae/wolfSSL_read_ex
...
SSL_read_ex() ... will return 1 for success or 0 for failure
2025-08-27 07:33:29 -07:00
David Garske
dac80aad58
Merge pull request #9142 from SparkiDev/mlkem_dec5_oor_fix
...
ML-KEM/Kyber: fix out of bouds read
2025-08-27 07:05:29 -07:00
effbiae
934364b8e1
wolfSSL_read_ex returns {0,1}
2025-08-27 15:35:17 +10:00
Sean Parkinson
4ff6f5f10c
ML-KEM/Kyber: fix out of bouds read
...
Decompose 5-bit values: Don't read 15 bytes when only have 10 bytes
available.
2025-08-27 14:49:24 +10:00
David Garske
c78bb1cd42
Merge pull request #9141 from gojimmypi/espressif-latest-debug
...
Fix workflow for latest ESP-IDF for espressif examples
2025-08-26 15:48:05 -07:00
gojimmypi
797c1d00ac
Fix workflow for latest ESP-IDF for espressif examples
2025-08-26 14:38:23 -07:00
Sean Parkinson
02cba85856
Merge pull request #9135 from douzzer/20250825-linuxkm-IntelRDseed64_r-burn-buf
...
20250825-linuxkm-IntelRDseed64_r-burn-buf
2025-08-27 07:22:25 +10:00
David Garske
71581e321e
Merge pull request #9098 from julek-wolfssl/fix-test_wolfSSL_tls_export
...
Fix test_wolfSSL_tls_export
2025-08-26 12:11:49 -07:00
philljj
00860baddf
Merge pull request #9136 from douzzer/20250826-more-wc_linuxkm_normalize_relocations
...
20250826-more-wc_linuxkm_normalize_relocations
2025-08-26 14:04:14 -05:00
David Garske
1ce13fc3ee
Merge pull request #9118 from SparkiDev/api_c_split_tls13
...
api.c: pull out TLS 1.3 specific tests
2025-08-26 09:23:56 -07:00
Daniel Pouzzner
79a75d1ef2
linuxkm/module_hooks.c: in wc_linuxkm_normalize_relocations(), allow non-text
...
relocations 1 byte outside the destination segment, and when
DEBUG_LINUXKM_PIE_SUPPORT, tally the relocation counts by segment for final info
report;
linuxkm/module_hooks.c and linuxkm/linuxkm_wc_port.h: tweak gating on
wc_linuxkm_normalize_relocations() and related -- ifdef
HAVE_LINUXKM_PIE_SUPPORT, not ifdef USE_WOLFSSL_LINUXKM_PIE_REDIRECT_TABLE --
for consistency+clarity.
2025-08-26 11:07:40 -05:00
David Garske
c7d1673948
Merge pull request #9132 from anhu/dup_CKS
...
Properly detect duplicate CKS extensions.
2025-08-26 09:07:04 -07:00
Juliusz Sosinowicz
d26b2811e0
test_wolfSSL_tls_export_run: silence unused cmpSess warning
2025-08-26 16:40:17 +02:00
Juliusz Sosinowicz
5934c1eece
Fix test_wolfSSL_tls_export
...
- Add TLS_EXPORT_OPT_SZ_4 to specify previous option size
- Actually pick up failures in the tests and propagate them to the top level
- Tests v4 and v5 sessions
Fixes https://github.com/wolfSSL/wolfssl/issues/9081 and https://github.com/wolfSSL/wolfssl/pull/9082
2025-08-26 11:04:54 +02:00
Daniel Pouzzner
fa61187f2e
linuxkm/module_hooks.c: in IntelRDseed64_r(), burn buf after each use to protect against info leakage.
2025-08-25 21:59:32 -05:00
Sean Parkinson
115d4d88c0
api.c: pull out TLS 1.3 specific tests
2025-08-26 09:05:46 +10:00
philljj
7aab2f3b47
Merge pull request #9126 from douzzer/20250823-linuxkm-reloc-bikeshedding
...
20250823-linuxkm-reloc-bikeshedding
2025-08-25 16:53:36 -05:00
lealem47
1c2fb10007
Merge pull request #9124 from dgarske/sniffer_partial_overlap
...
Fix for sniffer partial segment overlap that can occur when a TCP win…
2025-08-25 15:15:48 -06:00
David Garske
6ae0ecc5f3
Merge pull request #9133 from AlexLanzano/log-fix
...
Fix value comparison typo in if statement
2025-08-25 14:09:20 -07:00
David Garske
cfee026f98
Merge pull request #9131 from embhorn/zd20429
...
Fix markdown in docs
2025-08-25 14:08:30 -07:00