Juliusz Sosinowicz fa3feb7442 Zeroize static ephemeral key buffer before free ...

F-2144

SetStaticEphemeralKey loaded a private key file into keyBuf and freed it
without ForceZero. Static ephemeral keys are long-lived, so zeroize the
buffer before XFREE.

2026-04-17 16:46:57 +02:00

..

bio.c

bio: update stale comment

2026-04-10 08:50:30 +02:00

conf.c

Use size_t in wolfSSL_strnstr and reject negative indices in mp_get_digit

2026-04-10 10:48:17 -07:00

crl.c

Merge pull request #10218 from julek-wolfssl/zd/21535

2026-04-17 10:46:48 +10:00

dtls13.c

Cap DTLS1.3 max ACK records to prevent overflow

2026-04-05 11:32:53 +02:00

dtls.c

DTLS1.3: Implement RFC 9147 legacy_session_id_echo requirements

2026-03-31 12:42:16 +02:00

include.am

Address comments from bigbrett and Fenrir bot. Rename she.{c,h} to wc_she.{c,h}, fix naming consistency, auto-enable CMAC/AES dependencies, add WC_SHE_SW_DEFAULT opt-inAddress PR #10009 review comments from bigbrett and Fenrir

2026-04-15 11:28:03 -06:00

internal.c

Merge pull request #10224 from embhorn/zd21594

2026-04-17 09:44:33 +10:00

keys.c

Fix bugs found in crl.c, keys.c, and ssl_certman.c review

2026-04-14 13:14:21 +00:00

ocsp.c

Merge pull request #10064 from julek-wolfssl/master

2026-04-02 22:54:10 -05:00

pk_ec.c

Zeroize EC DER buffer in PEM write error path

2026-04-17 16:45:29 +02:00

pk_rsa.c

Zeroize RSA DER buffer in To_Der error path

2026-04-17 16:46:24 +02:00

pk.c

Zeroize DSA DER buffer in PEM write before free

2026-04-17 16:45:14 +02:00

quic.c

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data path in quic_record_make() and added a unit test for it

2026-04-14 12:43:19 +02:00

sniffer.c

Zeroize sniffer watch key buffer before free

2026-04-17 16:46:43 +02:00

ssl_api_cert.c

Address peer review

2026-02-25 15:46:20 +01:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_pk.c

remove early der free

2026-03-13 17:03:02 -06:00

ssl_asn1.c

Fix GetLength return value check in ASN1_INTEGER functions

2026-03-31 12:44:30 +02:00

ssl_bn.c

update Copyright year

2026-02-18 09:52:21 -07:00

ssl_certman.c

Fix bugs found in crl.c, keys.c, and ssl_certman.c review

2026-04-14 13:14:21 +00:00

ssl_crypto.c

update Copyright year

2026-02-18 09:52:21 -07:00

ssl_ech.c

small changes:

2026-03-20 14:39:29 -06:00

ssl_load.c

src/ssl_load.c, wolfssl/ssl.h, tests/api.c: rename wolfSSL*PrivateKey_id() to wolfSSL*PrivateKey_Id_ex(), and add missing WOLF_PRIVATE_KEY_ID gating.

2026-04-15 11:53:06 -05:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

fix to free x509 struct in error case with wolfSSL_PKCS7_get0_signers

2026-03-04 15:59:56 -07:00

ssl_sess.c

Merge pull request #10221 from julek-wolfssl/gh/10197

2026-04-16 08:16:31 +10:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl.c

Zeroize static ephemeral key buffer before free

2026-04-17 16:46:57 +02:00

tls13.c

Merge pull request #10225 from kareem-wolfssl/zd21544

2026-04-16 08:55:49 +10:00

tls.c

src/tls.c, wolfssl/ssl.h, tests/api.c: followup to ff7a32d022 (#10182):

2026-04-16 11:12:02 -05:00

wolfio.c

Merge pull request #9796 from JacobBarthelmeh/copyright

2026-02-19 08:47:30 -08:00

x509_str.c

Merge pull request #10170 from embhorn/zd21566

2026-04-15 08:58:28 +10:00

x509.c

src/ssl.c, src/ssl_sess.c, src/x509.c, wolfssl/internal.h: rename wolfssl_get_ex_new_index() to wolfssl_local_get_ex_new_index().

2026-04-15 11:53:32 -05:00