4971b9a567
Fix compilation errors about uninitialized variables
...
When compiling with '--enable-all CFLAGS=-Og' there were a ton of errors that needed fixing.
2024-01-25 09:49:30 -05:00
4f1d777090
BIO_BIO: BIO_{write|read} on a BIO pair should wrap around ring buffer
...
- BIO_nread0 should return 0 when no data to read and -2 when not initialized
2024-01-25 13:46:45 +01:00
a5961907b0
XMSS implementation
...
Supporting code for wolfSSL C implementation of XMSS.
2024-01-25 11:21:39 +10:00
7305583f72
Improvements to the STM32Cube template. Fix defaults for ASN template and SNI. Disable Shake by default. Add comment about AES CFB.
2024-01-24 10:35:32 -08:00
199a5476ec
Merge pull request #7166 from miyazakh/gcc5_strict-aliasing
...
fix strict-aliasing rules warning on gcc 5.x
2024-01-24 10:18:13 -08:00
999f84518c
RSA Decryption: check private value after decryption
2024-01-24 16:09:15 +10:00
00f4afb5ea
fix strict-aliasing rules warning
2024-01-24 12:37:16 +09:00
478c0633e7
Merge pull request #7159 from dgarske/features_20240122
...
Add PK Callback CMake support. Document `wc_RsaDirect`
2024-01-23 13:08:03 -08:00
fa87e227b4
Restore useful comments above wc_RsaDirect in the .c file.
2024-01-23 08:39:35 -08:00
3cbffd33b1
Merge pull request #7162 from per-allansson/dtls13-fips-missing-return
...
Fix missing return in DTLS1.3 / FIPS code
2024-01-23 08:30:11 -08:00
1574de1008
Merge pull request #7128 from embhorn/zd17251
...
XC32 compiler version 4.x compatibility
2024-01-23 08:20:39 -08:00
938698ec6b
Merge pull request #7157 from philljj/fix_zephyr_benchmark_rsa
...
zephyr samples: fix wolfssl_benchmark RSA.
2024-01-23 08:17:10 -08:00
78f7454043
Merge pull request #7154 from anhu/EccKeyParamCopy_error
...
Fix missing heap hint in `EccKeyParamCopy`
2024-01-23 08:11:35 -08:00
3b20f49544
Merge pull request #7139 from douzzer/20230118-fix-_sp_mont_red-WOLFSSL_NO_CT_OPS
...
20230118-fix-_sp_mont_red-WOLFSSL_NO_CT_OPS
2024-01-23 07:18:25 -08:00
92d7815b5c
Fix missing return in DTLS1.3 / FIPS code
2024-01-23 08:35:07 +01:00
916c22e021
Add PK (public key) callback support to CMake.
2024-01-22 13:42:31 -08:00
3d62896137
Add documentation for wc_RsaDirect.
2024-01-22 13:41:25 -08:00
dcc946575b
Fix missing heap hint in EccKeyParamCopy. The XFREE is required or it will leak memory allocated in ASNToHexString. This only applies to WOLFSSL_CUSTOM_CURVES && !WOLFSSL_ASN_TEMPLATE.
2024-01-22 13:18:24 -08:00
b0de0a1c95
Merge pull request #7143 from julek-wolfssl/zd/17303
...
EVP_Cipher: correct parameter checking
2024-01-23 07:15:20 +10:00
920aaebed7
zephyr samples: fix wolfssl_benchmark RSA.
2024-01-22 14:59:09 -06:00
eb1fff3ad3
Merge pull request #7141 from julek-wolfssl/zd/17249
...
EarlySanityCheckMsgReceived: version_negotiated should always be checked
2024-01-22 12:18:57 -08:00
f2a76a0630
Merge pull request #7156 from bandi13/checkNullInput
...
Check NULL input
2024-01-22 12:07:20 -08:00
5c75ca539e
Check NULL input
2024-01-22 12:45:42 -05:00
0c150d2391
Merge pull request #7150 from dgarske/getenv
...
Fix build with `NO_STDIO_FILESYSTEM` and improve checks for `XGETENV`
2024-01-22 08:33:24 -08:00
12dafec3aa
Merge pull request #7149 from dgarske/psa_cryptocb
...
Remove the PSA restriction to allow use with crypto callbacks
2024-01-22 08:24:51 -08:00
2617669302
Merge pull request #7152 from douzzer/20240120-multi-test-fixes
...
20240120-multi-test-fixes
2024-01-22 08:19:23 -08:00
ccbb726859
Remove dead code in EccKeyParamCopy
...
Found with:
./configure --enable-ecccustcurves --enable-asn=original CFLAGS=-DWOLFSSL_ECC_CURVE_STATIC
2024-01-22 10:27:59 -05:00
fc7143a8f4
Code review
2024-01-22 16:08:06 +01:00
d2d653cfdc
Merge pull request #7145 from douzzer/20240119-DoTls13CertificateVerify-CreateSigData-error-handling
...
20240119-DoTls13CertificateVerify-CreateSigData-error-handling
2024-01-22 07:36:49 +10:00
b0d64b419d
Merge pull request #7084 from julek-wolfssl/set-cipher-ssl
...
Allow SetCipherList to operate on SSL without modifying on SSL_CTX
2024-01-22 07:31:22 +10:00
2edd18c49d
src/x509.c: fix nullPointerRedundantCheck in wolfSSL_X509V3_set_ctx(). also adds thorough WOLFSSL_MSG() coverage for failures.
2024-01-20 13:08:21 -06:00
d043333bee
Merge pull request #7148 from gojimmypi/PR-fix-Espressif-cmake
...
Fix Espressif component cmake for environment variable source
2024-01-19 13:27:32 -08:00
37fbb4fbae
Merge pull request #7146 from kareem-wolfssl/zd17295
...
Remove git ignored files from IAR-EWARM projects.
2024-01-19 13:13:06 -08:00
76550465bd
Fixes build with NO_STDIO_FILESYSTEM defined.
2024-01-19 12:49:53 -08:00
111f584d99
Remove the PSA restriction to allow use with crypto callbacks.
2024-01-19 12:15:40 -08:00
a4affd9431
Improve use of XGETENV in wolfSSL_RAND_file_name to check for macro.
2024-01-19 12:13:19 -08:00
92ab2eaca3
Fix Espressif component cmake for environment variable source
2024-01-19 11:54:10 -08:00
6b8280f663
Merge pull request #7144 from bandi13/20240119-codesonar
...
20240119 codesonar
2024-01-19 09:35:02 -08:00
a3a7012c81
Merge pull request #7136 from jpbland1/x509-new-ex
...
add heap hint support for a few of the x509 functions
2024-01-19 09:29:47 -08:00
f1e833005b
Remove git ignored files from IAR-EWARM projects.
2024-01-19 10:24:50 -07:00
9aa99c0c9a
src/tls13.c: in DoTls13CertificateVerify(), add missing error handling in several calls to CreateSigData().
2024-01-19 11:12:23 -06:00
66f04958e3
use wolfSSL_CTX_new_ex for heap hint support
2024-01-19 11:20:50 -05:00
dbc209d8ea
Always initialize 'decryptedKey'
...
Warning 750167.5627928
2024-01-19 10:58:29 -05:00
7069a1805a
Avoid "Use after free"
...
Warning 544767.5627232
2024-01-19 10:47:38 -05:00
2c162ffb97
Make sure aes->rounds is initialized
...
Warning 684346.5627323
2024-01-19 10:39:33 -05:00
726e7026cb
Uninitialized variable because we don't check return value
...
Warning 544870.5627882
2024-01-19 10:31:20 -05:00
1288d71132
Address code review
2024-01-19 15:59:22 +01:00
f6ef146149
EarlySanityCheckMsgReceived: version_negotiated should always be checked
...
Multiple handshake messages in one record will fail the MsgCheckBoundary() check on the client side when the client is set to TLS 1.3 but allows downgrading.
--> ClientHello
<-- ServerHello + rest of TLS 1.2 flight
Client returns OUT_OF_ORDER_E because in TLS 1.3 the ServerHello has to be the last message in a record. In TLS 1.2 the ServerHello can be in the same record as the rest of the server's first flight.
2024-01-19 14:57:35 +01:00
afd0e5af4e
Refactor haveAnon into useAnon
...
(ctx->|ssl->options.)useAnon means that the user has signalled that they want anonymous ciphersuites
2024-01-19 14:53:33 +01:00
b8b847bbcf
Allow SetCipherList to operate on SSL without modifying on SSL_CTX
2024-01-19 14:53:28 +01:00
Andras Fekete
Juliusz Sosinowicz
Sean Parkinson
David Garske
JacobBarthelmeh
Hideki Miyazaki
Per Allansson
jordan
Anthony Hu
Daniel Pouzzner
gojimmypi
Kareem
John Bland