ca11b4e560
siphash: fix assembly so that no register is left behind
...
Change all assembly so that no register is used explicitly - all
variables.
2023-03-29 09:38:04 +10:00
35111b29c1
Merge pull request #6244 from bandi13/consolidateVMdeps
...
Fix dependencies
2023-03-28 13:30:08 -07:00
ba47562d18
Merge pull request #6238 from bandi13/fixRenewcerts.sh
...
Remove expectation for an argument to be passed
2023-03-28 11:24:51 -06:00
103f6e7520
Fix dependencies
2023-03-28 11:56:29 -04:00
f1aa43dc48
Merge pull request #6230 from bandi13/zd15855
...
Fix for variable server startup time
2023-03-28 09:13:52 -06:00
ba2b7af84a
Merge pull request #6241 from lealem47/strncmp
...
Fixes for sniffer with enable all
2023-03-28 09:13:11 -06:00
0a2201700d
Put the .rnd file in a local folder
2023-03-28 10:43:17 -04:00
1cf2d9ece3
Create files that the script depends on
2023-03-28 10:16:24 -04:00
610c45afb6
Don't need to store state anymore
2023-03-28 10:15:58 -04:00
591089664d
Fixes for sniffer with enable all
2023-03-27 16:37:14 -06:00
1f6071df33
PR suggestions
2023-03-27 13:59:01 -04:00
496a15037b
Merge pull request #6166 from TakayukiMatsuo/tsip117
2023-03-27 11:49:18 -06:00
cadd2d9ab6
Remove expectation for an argument to be passed
...
Added in a failing return value to flush out tests/scripts that may be calling this script multiple times with various arguments
2023-03-27 13:30:12 -04:00
85e82746c3
Merge pull request #6210 from rizlik/realloc_on_espressif
...
wolfcrypt/settings.h: use default realloc on EspressIf
2023-03-27 09:28:42 -07:00
979707380c
Merge pull request #6232 from JacobBarthelmeh/release
...
prepare for release 5.6.0
2023-03-24 10:14:19 -07:00
877e026da4
prepare for release 5.6.0
2023-03-23 21:44:18 -07:00
d57d6d2b78
Fix for variable server startup time
2023-03-23 15:03:26 -04:00
e0e590f126
Merge pull request #6223 from lealem47/misc_fixes
...
Async build typos and miscellaneous fixes
2023-03-23 23:55:20 +07:00
aeffe6cfa7
Merge pull request #6222 from JacobBarthelmeh/alerts
...
don't try to send an alert to a disconnected peer
2023-03-23 09:49:15 -07:00
3ef7db8e1b
Merge pull request #6229 from JacobBarthelmeh/Testing
...
fix for check on ecc public key size with FIPS and compressed keys
2023-03-23 08:25:31 -07:00
e9214e07cf
Merge pull request #6219 from RSmatRA/RSmatRA/zeroing-input-buffer
...
Do not ForceZero the part of the buffer that has not been used.
2023-03-23 21:13:37 +07:00
a121a5c270
Merge pull request #6225 from SparkiDev/memzero_check_fixes_1
...
MemZero check fixes
2023-03-23 21:04:39 +07:00
25577ab96c
fix for check on ecc public key size with FIPS and compressed keys
2023-03-23 06:58:03 -07:00
d1e4349661
MemZero check fixes
...
ForceZero the client and server secret regardless of whether TLS 1.3 as
it may change but have been copied in.
ForceZero the input buffer in wolfSSL_Clear() when encryption was on.
Changed wc_PRF_TLS to only check the parts of data used.
Changed where scatch is added for checking in wc_AesCtrEncrypt.
Change wc_MakeRsaKey to memset p, q, tmp1, tmp2 and tmp3 to all zeros so
that MemZero check works. Memset not needed otherwise.
Changes for new compiler - thinks uninitialized.
2023-03-23 12:27:38 +10:00
6ad786abe4
Merge pull request #6224 from SparkiDev/quic_aes_gcm_stream
...
AES-GCM streaming: EVP needs to set IV with wc_AesGcmInit
2023-03-23 08:25:31 +07:00
a31ca24bb0
Fix for async build with enable all
2023-03-22 17:30:38 -06:00
c83e899b78
Fix for overlong string warning
2023-03-22 17:29:53 -06:00
a5e7a20c93
Fix for logic gating strerror_r()
2023-03-22 17:29:13 -06:00
1fa75a5503
AES-GCM streaming: EVP needs to set IV with wc_AesGcmInit
...
Store IV if it is small enough to fit in aes->reg - was a copy of the
aes->reg in the first place.
2023-03-23 09:28:22 +10:00
df4081ea5a
Merge pull request #6215 from JacobBarthelmeh/static_analysis
...
fixes for static analysis reports
2023-03-23 08:37:08 +10:00
7734588669
don't try to send an alert to a disconnected peer
2023-03-22 14:20:07 -07:00
835e8a18c7
Merge pull request #6216 from JacobBarthelmeh/fuzzing
...
adjust sanity check for index into URI
2023-03-22 12:52:04 -07:00
c11f5d0ee5
fixes for static analysis reports
2023-03-22 12:34:37 -07:00
7c122cda6d
Merge pull request #6197 from JacobBarthelmeh/Testing
...
adjust location of Options typdef
2023-03-22 12:31:00 -07:00
edca6b9d03
adjust location of Options typedef
2023-03-22 09:27:26 -07:00
7e8d027a17
Merge pull request #6217 from douzzer/20230321-fixes
...
20230321-fixes
2023-03-22 10:23:07 -06:00
e618bb9686
Do not ForceZero the part of the buffer that has not been used.
2023-03-22 14:48:18 +01:00
49cd3ff872
wolfssl/internal.h: fixes for -Wpedantic "redefinition of typedef" around typedef ... TLSX and Options;
...
src/internal.c: fix for -Wdeclaration-after-statement and clang-diagnostic-unreachable-code-break;
tests/api.c: fix for -Wunused-variable and clang-analyzer-deadcode.DeadStores;
olfcrypt/src/pkcs12.c: fixes for cppcheck uselessAssignmentPtrArg and arrayIndexThenCheck, and clang-tidy clang-analyzer-deadcode.DeadStores and clang-analyzer-core.NonNullParamChecker;
wolfssl/src/tls.c: fix for clang-analyzer-deadcode.DeadStores;
wolfcrypt/src/tfm.c: fix for clang-diagnostic-newline-eof;
src/tls13.c: fix for clang-analyzer-core.NonNullParamChecker.
2023-03-21 22:52:56 -05:00
180a20d535
adjust sanity check for index into URI
2023-03-21 20:19:08 -07:00
147395476f
Merge pull request #6213 from SparkiDev/regression_fixes_6
...
Regression testing fixes
2023-03-21 20:17:30 -06:00
9ec742b11f
Regression testing fixes
...
HAVE_ECH only used by TLS 1.3 add protection around all code.
ssl->options.onlyPskDheKe only available when HAVE_SUPPORTED_CURVES.
CleanupClientTickets() defined when HAVE_SUPPORTED_CURVES.
TLSX_KeyShare_DeriveSecret only defined when HAVE_SUPPORTED_CURVES.
DecodeResponseData - initialize variable single.
New OpenSSL compatibility BN code requires mp_read_radix - turn on in
integer.c, sp_int.c when OPENSSL_EXTRA defined.
rsa.c:_CheckProbablePrime - make sure tmp1 and tmp2 are initialized
before error handling jumps to freeing them.
test_remove_hs_message uses 1024-bit DH key which is not supported when
using SP math with SP.
2023-03-22 08:57:20 +10:00
1eeb54e981
Merge pull request #6208 from JacobBarthelmeh/fuzzing
...
handle failing RNG init when creating PKEY
2023-03-22 08:55:38 +10:00
2af55903c5
Merge pull request #6187 from SparkiDev/tls13_server_id
...
Server ID - long id, TLS 1.3 - cache client session for tickets
2023-03-21 16:48:05 -06:00
265a6c824f
Merge pull request #6164 from wolfSSL/gojimmypi-patch-zephyr-link
...
Update README link
2023-03-21 09:10:52 -06:00
17e20b8c36
Server ID - long id, TLS 1.3 - cache client session for tickets
...
Long server IDs were being truncated. Hash long IDs instead.
TLS 1.3 session ticket on client side no longer added session to client
cache. Explicit call added.
2023-03-21 15:29:07 +10:00
74f549a0b4
Merge pull request #6206 from SparkiDev/aesgcm_armv6_asm
...
AES ARMASM <ARMV7: fix load order
2023-03-20 21:21:01 -07:00
7d2a9136b6
Add support for TSIP v1.17
2023-03-21 11:28:07 +09:00
4eeb792a05
AES ARMASM <ARMV7: fix load order
...
Loading from memory based on register that is overwritten in ldrd.
When ldrd split out for older processors, register overwritten before
second load.
Switch order of loads in this case.
2023-03-21 10:53:47 +10:00
09dd9a0ca3
Merge pull request #6207 from rizlik/move_alerts_from_get_record_header
...
Move alerts from get record header
2023-03-21 08:20:22 +10:00
5c7be2fa98
Merge pull request #6202 from philljj/zd15807
...
Fix out-of-bounds read in CRL parsing
2023-03-20 14:19:01 -06:00
Sean Parkinson
David Garske
Kaleb Himes
Andras Fekete
JacobBarthelmeh
Lealem Amedie
Chris Conlon
Radim Smat
Daniel Pouzzner
John Safranek
TakayukiMatsuo