David Garske a4aab71ffe Merge pull request #10861 from padelsbach/asn-integer-overflow-copy ...

Fix possible memcpy length overflow in wolfSSL_d2i_ASN1_INTEGER

2026-07-08 15:20:05 -07:00

..

bio.c

F-6345 - Reject oversized length in memory BIO write

2026-07-02 11:36:01 +02:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Merge pull request #10693 from padelsbach/crl-use-after-free

2026-07-08 11:37:41 -07:00

dtls13.c

Merge pull request #10833 from kareem-wolfssl/zd22079

2026-07-06 17:28:22 -07:00

dtls.c

NewConnectionId: reject CID larger than DTLS_CID_MAX_SIZE

2026-07-02 14:16:25 +02:00

include.am

Time-Stamp Protocol (RFC 3161)

2026-07-08 09:33:47 +10:00

internal.c

Merge pull request #10408 from hmohide/master

2026-07-08 12:24:31 -07:00

keys.c

Cache AEAD record overhead on WOLFSSL

2026-05-28 16:19:44 +02:00

ocsp.c

Remove logically dead len and *data checks

2026-06-25 14:44:03 -06:00

pk_ec.c

wolfssl/wolfcrypt/hash.h, src/internal.c, src/pk_ec.c, tests/api/api.h, wolfcrypt/src/dsa.c, wolfcrypt/src/ecc.c, wolfcrypt/src/pkcs7.c, wolfcrypt/test/test.c:

2026-07-07 00:19:48 -05:00

pk_rsa.c

Size cert signature buffers from the key and check sig type vs key

2026-06-10 10:51:41 +02:00

pk.c

F-4591: fix right-justification of short DH shared secret

2026-06-03 13:01:19 +02:00

quic.c

Merge pull request #10788 from aidangarske/fenrir-tls-batch-2026-06

2026-07-08 13:58:14 -07:00

sniffer.c

F-4809 - Widen ClientHello extension length check to avoid word16 truncation

2026-06-25 15:07:34 -07:00

ssl_api_cert.c

Merge remote-tracking branch 'upstream/master' into harden-chain-depth-and-parser-bounds

2026-06-10 11:26:12 -07:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_dtls.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

ssl_api_ext.c

src/ssl_api_ext.c and src/ssl_api_pk.c: restore early BAD_FUNC_ARG returns that were refactored away in 359e688dc3, fixing null pointer deref regression in wolfSSL_UseALPN() (possibly others too).

2026-06-10 12:05:00 -05:00

ssl_api_pk.c

src/ssl_api_ext.c and src/ssl_api_pk.c: restore early BAD_FUNC_ARG returns that were refactored away in 359e688dc3, fixing null pointer deref regression in wolfSSL_UseALPN() (possibly others too).

2026-06-10 12:05:00 -05:00

ssl_asn1.c

Merge pull request #10861 from padelsbach/asn-integer-overflow-copy

2026-07-08 15:20:05 -07:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

certman: enforce keyCertSign usage on chain-supplied intermediate CAs

2026-06-16 20:31:36 +02:00

ssl_crypto.c

cryptocb: support WOLF_CRYPTO_CB_ONLY_SHA512

2026-06-04 20:21:50 +02:00

ssl_ech.c

Merge pull request #10469 from sebastian-carpenter/tls-ech-server-improvements

2026-05-23 00:07:40 +10:00

ssl_load.c

Merge pull request #10209 from ColtonWilley/harden-chain-depth-and-parser-bounds

2026-07-03 01:03:36 -05:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

PKCS7: tighten signature presence check in PKCS7_verify

2026-06-16 20:19:22 +02:00

ssl_sess.c

Check SNI/ALPN in TLS 1.2 stateful session ID resumption

2026-05-27 09:16:34 -04:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl_tsp.c

Time-Stamp Protocol (RFC 3161)

2026-07-08 09:33:47 +10:00

ssl.c

Merge pull request #10788 from aidangarske/fenrir-tls-batch-2026-06

2026-07-08 13:58:14 -07:00

tls13.c

Merge pull request #10626 from mattia-moffa/20260605-dtls-cid-check-newest

2026-07-03 01:18:38 -05:00

tls.c

Fix TLS 1.3 hybrid PQC server key share dropped under async crypt

2026-07-07 09:54:03 -07:00

wolfio.c

Merge pull request #10408 from hmohide/master

2026-07-08 12:24:31 -07:00

x509_str.c

x509_str.c: gate pathLen decrement on isCa

2026-07-07 16:02:27 +02:00

x509.c

Merge pull request #10778 from SparkiDev/time_stamp_protocol

2026-07-08 17:43:38 +02:00