David Garske e0a8f3f475 Merge pull request #10706 from JacobBarthelmeh/dev ...

defense in depth hardening for x509 extension create by OBJ and EVP decode update

2026-07-07 16:41:15 -07:00

..

bio.c

F-6345 - Reject oversized length in memory BIO write

2026-07-02 11:36:01 +02:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Regression testing fixes - memory allocation failure testing

2026-06-11 12:14:06 +10:00

dtls13.c

Merge pull request #10833 from kareem-wolfssl/zd22079

2026-07-06 17:28:22 -07:00

dtls.c

NewConnectionId: reject CID larger than DTLS_CID_MAX_SIZE

2026-07-02 14:16:25 +02:00

include.am

Merge pull request #10696 from douzzer/20260615-linuxkm-fixes

2026-06-30 12:00:25 -05:00

internal.c

Merge pull request #10856 from douzzer/20260702-linuxkm-various

2026-07-07 17:44:50 -05:00

keys.c

Cache AEAD record overhead on WOLFSSL

2026-05-28 16:19:44 +02:00

ocsp.c

Remove logically dead len and *data checks

2026-06-25 14:44:03 -06:00

pk_ec.c

wolfssl/wolfcrypt/hash.h, src/internal.c, src/pk_ec.c, tests/api/api.h, wolfcrypt/src/dsa.c, wolfcrypt/src/ecc.c, wolfcrypt/src/pkcs7.c, wolfcrypt/test/test.c:

2026-07-07 00:19:48 -05:00

pk_rsa.c

Size cert signature buffers from the key and check sig type vs key

2026-06-10 10:51:41 +02:00

pk.c

F-4591: fix right-justification of short DH shared secret

2026-06-03 13:01:19 +02:00

quic.c

Fix whitespaces

2026-07-07 08:51:12 +04:00

sniffer.c

zero sensitive material before free

2026-05-14 16:59:48 +00:00

ssl_api_cert.c

Merge remote-tracking branch 'upstream/master' into harden-chain-depth-and-parser-bounds

2026-06-10 11:26:12 -07:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_dtls.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

ssl_api_ext.c

src/ssl_api_ext.c and src/ssl_api_pk.c: restore early BAD_FUNC_ARG returns that were refactored away in 359e688dc3, fixing null pointer deref regression in wolfSSL_UseALPN() (possibly others too).

2026-06-10 12:05:00 -05:00

ssl_api_pk.c

src/ssl_api_ext.c and src/ssl_api_pk.c: restore early BAD_FUNC_ARG returns that were refactored away in 359e688dc3, fixing null pointer deref regression in wolfSSL_UseALPN() (possibly others too).

2026-06-10 12:05:00 -05:00

ssl_asn1.c

F-6351 - Fix use after free in wolfSSL_ASN1_STRING_set self-alias

2026-07-02 11:36:01 +02:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

certman: enforce keyCertSign usage on chain-supplied intermediate CAs

2026-06-16 20:31:36 +02:00

ssl_crypto.c

cryptocb: support WOLF_CRYPTO_CB_ONLY_SHA512

2026-06-04 20:21:50 +02:00

ssl_ech.c

Merge pull request #10469 from sebastian-carpenter/tls-ech-server-improvements

2026-05-23 00:07:40 +10:00

ssl_load.c

Merge pull request #10209 from ColtonWilley/harden-chain-depth-and-parser-bounds

2026-07-03 01:03:36 -05:00

ssl_misc.c

…

ssl_p7p12.c

PKCS7: tighten signature presence check in PKCS7_verify

2026-06-16 20:19:22 +02:00

ssl_sess.c

Check SNI/ALPN in TLS 1.2 stateful session ID resumption

2026-05-27 09:16:34 -04:00

ssl_sk.c

…

ssl.c

Merge pull request #10770 from embhorn/zd22032

2026-07-07 14:48:29 -07:00

tls13.c

Merge pull request #10626 from mattia-moffa/20260605-dtls-cid-check-newest

2026-07-03 01:18:38 -05:00

tls.c

Merge pull request #10209 from ColtonWilley/harden-chain-depth-and-parser-bounds

2026-07-03 01:03:36 -05:00

wolfio.c

Merge pull request #10290 from LinuxJedi/emnet

2026-05-05 11:46:15 -07:00

x509_str.c

x509: harden wolfSSL_X509_verify_cert() against alloc failure and stack pollution

2026-06-12 17:29:31 +02:00

x509.c

Merge pull request #10706 from JacobBarthelmeh/dev

2026-07-07 16:41:15 -07:00