Low-severity security hardening across TLS, X.509, PKCS#7/12, DTLS 1.3, QUIC, and the sniffer#10878

Open

aidangarske wants to merge 36 commits into

wolfSSL:masterfrom

aidangarske:fenrir-tls-triage

Commits on Jul 10, 2026

F-6559 - Reject certs with critical policyConstraints/inhibitAnyPolicy
aidangarske
committed
F-6731 - ForceZero PreSharedKey identity holding resumption secret before free
aidangarske
committed
F-6730 - Use DTLS-aware header size for ECH inner ClientHello buffer
aidangarske
committed
F-6723 - Silently discard ChangeCipherSpec records on DTLS 1.3
aidangarske
committed
F-6711 - Publish bn_one via atomic compare-exchange to fix init race
aidangarske
committed
F-4112 - Map check_cert_key errors to failure in dual-alg check_private_key
aidangarske
committed
F-4111 - NULL-check ssl in wolfSSL_get_ocsp_producedDate accessors
aidangarske
committed
F-6328 - Fix mis-gated key->dp NULL check in wc_BuildEccKeyDer
aidangarske
committed
F-6704 - Free WOLFSSL_X509 on CopyDecodedToX509 failure in X509_STORE_GetCerts
aidangarske
committed
F-6705 - Log peerCert copy failure only on actual failure
aidangarske
committed
F-5585 - Take cert ownership after incorporation to avoid double-free
aidangarske
committed
F-6712 - Guard gDrbgDefCtx lazy init/free with globalRNGMutex
aidangarske
committed
F-5625 - Cap BIO file read at MAX_WOLFSSL_FILE_SIZE
aidangarske
committed
F-6557 - Lock ticket key/expiry read against concurrent regeneration
aidangarske
committed
F-5729 - Guard PKCS7 streaming content size against word32 overflow
aidangarske
committed
F-6708 - Honor verify callback rejection in X509StoreVerifyCert
aidangarske
committed
F-4154 - Zero ML-KEM key struct so unconditional free is safe
aidangarske
committed
F-4155 - Add INT_MAX guard on plainlen/aadlen in quic_aead_encrypt
aidangarske
committed
F-5755 - Add INT_MAX guard on aadlen in quic_aead_decrypt
aidangarske
committed
F-5859 - Add INT_MAX guards on secretlen/infolen in quic_hkdf_expand
aidangarske
committed
F-5860 - Add INT_MAX guards on saltlen/secretlen/infolen in quic_hkdf
aidangarske
committed
F-6523 - Read remaining length (fcur) not total (flen) in d2i_OCSP_RESPONSE_bio
aidangarske
committed
F-5626 - Reject out-of-range port in wolfSSL_BIO_new_connect
aidangarske
committed
F-3886 - NULL-check ssl and validate depth in wolfSSL_set_verify_depth
aidangarske
committed
F-4149 - ForceZero MD5 CertVerify digest scratch buffer
aidangarske
committed
F-4150 - ForceZero SHA CertVerify digest scratch buffer
aidangarske
committed
F-4616 - ForceZero MD5 SSLv3 Finished digest scratch buffer
aidangarske
committed
F-4617 - ForceZero SHA SSLv3 Finished digest scratch buffer
aidangarske
committed
F-1839 - ForceZero entropy seed in wolfSSL_RAND_pseudo_bytes
aidangarske
committed
F-1842 - ForceZero assembled 3DES key in wolfSSL_DES_ede3_cbc_encrypt
aidangarske
committed
F-6729 - Reject un-offered certificate type selected by peer
aidangarske
committed
F-6303 - Bounds-check ato24 reads in sniffer ProcessCertificate
aidangarske
committed
F-6712 - Skip globalRNGMutex lock when unavailable during cleanup
aidangarske
committed
F-6559 - Gate critical policyConstraints test to strict-ASN builds
aidangarske
committed
F-6559 - Backdate policyConstraints test cert so only critical-ext rejection fails it
aidangarske
committed
F-6708 - Make verify callback rejection terminal to prevent second-pass override
aidangarske
committed