Kareem 9f5c89ab4b Properly check for signature_algorithms from the client in a TLS 1.3 server. ...

The server was checking ssl->extensions which will always have an entry for TLSX_SIGNATURE_ALGORITHMS
as it is unconditionally added by TLSX_PopulateExtensions earlier in the DoTls13ClientHello function.
Instead, check args->clSuites->hashSigAlgoSz which is only set if signature_algorithms is found and parsed by TLSX_Parse.

2025-01-13 16:22:28 -07:00

..

bio.c

Further fixes with NO_TLS to support use with compatibility layer.

2024-12-17 09:24:38 -08:00

conf.c

Fix a couple of missing bounds checks found via code analyzer.

2024-12-19 17:01:25 -07:00

crl.c

numerous fixes for memory errors reported by clang-tidy, most of them true positives, unmasked by CPPFLAGS=-DNO_WOLFSSL_MEMORY: clang-analyzer-unix.Malloc, clang-analyzer-core.NullDereference, clang-analyzer-core.uninitialized.Assign, clang-analyzer-core.UndefinedBinaryOperatorResult, and clang-analyzer-optin.portability.UnixAPI (re malloc(0)).

2025-01-10 14:30:42 -06:00

dtls13.c

DTLS: Add server side stateless and CID QoL API

2024-12-18 09:31:24 +01:00

dtls.c

fixup! DTLS: Add server side stateless and CID QoL API

2024-12-18 09:31:25 +01:00

include.am

Kyber ARM32 ASM: add assembly using base instructions

2024-10-04 11:06:18 +10:00

internal.c

account for rsa_pss_rsae vs rsa_pss_pss type

2024-12-23 23:45:33 -07:00

keys.c

Fix nested NO_TLS.

2024-12-17 08:33:33 -08:00

ocsp.c

Merge pull request #8098 from dgarske/x86_notwindows_2

2024-11-05 00:13:13 -06:00

pk.c

Merge pull request #8181 from gojimmypi/dev-compiler-message

2024-12-16 23:19:05 -06:00

quic.c

Revert "quic_record_append: return correct code"

2025-01-10 17:38:02 -06:00

sniffer.c

Add size checks to sessionID

2024-12-04 11:56:16 +01:00

ssl_asn1.c

Initialize vars & change types to appease Windows/VS

2024-11-17 17:50:17 -08:00

ssl_bn.c

Globally remap & refactor conflicting symbols to allow -DOPENSSL_EXTRA -DOPENSSL_COEXIST, or equivalently, --enable-opensslextra --enable-opensslcoexist.

2024-10-31 00:10:21 -05:00

ssl_certman.c

fix for dead code warning CID444417

2024-12-30 16:14:28 -07:00

ssl_crypto.c

src/ssl_crypto.c: revert FIPS gate threshold in wolfSSL_AES_decrypt() changed in d85c108952 -- original value was correct, misdiagnosed by faulty test.

2024-12-06 13:01:40 -06:00

ssl_load.c

fedora crypto-policies: initial support.

2024-12-18 16:56:36 -06:00

ssl_misc.c

Missing libspdm features

2024-09-02 10:01:12 +02:00

ssl_p7p12.c

Initialize vars & change types to appease Windows/VS

2024-11-17 17:50:17 -08:00

ssl_sess.c

Further fixes with NO_TLS to support use with compatibility layer.

2024-12-17 09:24:38 -08:00

ssl.c

numerous fixes for memory errors reported by clang-tidy, most of them true positives, unmasked by CPPFLAGS=-DNO_WOLFSSL_MEMORY: clang-analyzer-unix.Malloc, clang-analyzer-core.NullDereference, clang-analyzer-core.uninitialized.Assign, clang-analyzer-core.UndefinedBinaryOperatorResult, and clang-analyzer-optin.portability.UnixAPI (re malloc(0)).

2025-01-10 14:30:42 -06:00

tls13.c

Properly check for signature_algorithms from the client in a TLS 1.3 server.

2025-01-13 16:22:28 -07:00

tls.c

Merge pull request #8303 from night1rider/ZD-19038

2025-01-10 10:53:26 -07:00

wolfio.c

Protect peer access when WOLFSSL_RW_THREADED

2024-12-18 09:31:25 +01:00

x509_str.c

fix for check on number of objects when free'ing and add test case

2024-12-27 08:09:03 -08:00

x509.c

numerous fixes for memory errors reported by clang-tidy, most of them true positives, unmasked by CPPFLAGS=-DNO_WOLFSSL_MEMORY: clang-analyzer-unix.Malloc, clang-analyzer-core.NullDereference, clang-analyzer-core.uninitialized.Assign, clang-analyzer-core.UndefinedBinaryOperatorResult, and clang-analyzer-optin.portability.UnixAPI (re malloc(0)).

2025-01-10 14:30:42 -06:00