Low-severity security hardening across TLS, X.509, PKCS#7/12, DTLS 1.3, QUIC, and the sniffer - #10878

Open

aidangarske wants to merge 37 commits into

wolfSSL:masterfrom

aidangarske:fenrir-tls-triage

Commits on Aug 1, 2026

F-6559 - Reject certs with critical policyConstraints/inhibitAnyPolicy
aidangarske
committed
6b65490
F-6731 - ForceZero PreSharedKey identity holding resumption secret before free
aidangarske
committed
764c974
F-6730 - Use DTLS-aware header size for ECH inner ClientHello buffer
aidangarske
committed
a58610c
F-6723 - Silently discard ChangeCipherSpec records on DTLS 1.3
aidangarske
committed
d27f08a
F-6711 - Publish bn_one via atomic compare-exchange to fix init race
aidangarske
committed
c0361a1
F-4112 - Map check_cert_key errors to failure in dual-alg check_private_key
aidangarske
committed
0b7c603
F-4111 - NULL-check ssl in wolfSSL_get_ocsp_producedDate accessors
aidangarske
committed
83d0078
F-6328 - Fix mis-gated key->dp NULL check in wc_BuildEccKeyDer
aidangarske
committed
5275012
F-6704 - Free WOLFSSL_X509 on CopyDecodedToX509 failure in X509_STORE_GetCerts
aidangarske
committed
3243436
F-6705 - Log peerCert copy failure only on actual failure
aidangarske
committed
1fc1050
F-5585 - Take cert ownership after incorporation to avoid double-free
aidangarske
committed
2184958
F-6712 - Guard gDrbgDefCtx lazy init/free with globalRNGMutex
aidangarske
committed
f85e570
F-5625 - Cap BIO file read at MAX_WOLFSSL_FILE_SIZE
aidangarske
committed
f416cfe
F-6557 - Lock ticket key/expiry read against concurrent regeneration
aidangarske
committed
1e45969
F-5729 - Guard PKCS7 streaming content size against word32 overflow
aidangarske
committed
4404b0c
F-6708 - Honor verify callback rejection in X509StoreVerifyCert
aidangarske
committed
463a010
F-4154 - Zero ML-KEM key struct so unconditional free is safe
aidangarske
committed
0b4f44d
F-4155 - Add INT_MAX guard on plainlen/aadlen in quic_aead_encrypt
aidangarske
committed
50594a9
F-5755 - Add INT_MAX guard on aadlen in quic_aead_decrypt
aidangarske
committed
86fdfa1
F-5859 - Add INT_MAX guards on secretlen/infolen in quic_hkdf_expand
aidangarske
committed
23013f3
F-5860 - Add INT_MAX guards on saltlen/secretlen/infolen in quic_hkdf
aidangarske
committed
16a28a3
F-6523 - Read remaining length (fcur) not total (flen) in d2i_OCSP_RESPONSE_bio
aidangarske
committed
567aa3a
F-5626 - Reject out-of-range port in wolfSSL_BIO_new_connect
aidangarske
committed
b855a2f
F-3886 - NULL-check ssl and validate depth in wolfSSL_set_verify_depth
aidangarske
committed
4bc24ee
F-4149 - ForceZero MD5 CertVerify digest scratch buffer
aidangarske
committed
9c65f9c
F-4150 - ForceZero SHA CertVerify digest scratch buffer
aidangarske
committed
9928a24
F-4616 - ForceZero MD5 SSLv3 Finished digest scratch buffer
aidangarske
committed
16b29e6
F-4617 - ForceZero SHA SSLv3 Finished digest scratch buffer
aidangarske
committed
dac9ec3
F-1842 - ForceZero assembled 3DES key in wolfSSL_DES_ede3_cbc_encrypt
aidangarske
committed
ed421d7
F-6729 - Reject un-offered certificate type selected by peer
aidangarske
committed
84b3b8d
F-6303 - Bounds-check ato24 reads in sniffer ProcessCertificate
aidangarske
committed
2c08392
F-6712 - Skip globalRNGMutex lock when unavailable during cleanup
aidangarske
committed
2b38507
F-6559 - Gate critical policyConstraints test to strict-ASN builds
aidangarske
committed
418edd3
F-6559 - Backdate policyConstraints test cert so only critical-ext rejection fails it
aidangarske
committed
9d0aee4
F-6708 - Make verify callback rejection terminal to prevent second-pass override
aidangarske
committed
61b23ce
6559 - Expect critical inhibitAnyPolicy rejection in cert_test
aidangarske
committed
42da053
Guard gDrbgDefCtx access on lock success in FIPS DRBG helpers
aidangarske
committed
ec45a2f