Fix multiple Fenrir issues - #11181

Open

kareem-wolfssl wants to merge 17 commits into

wolfSSL:masterfrom

kareem-wolfssl:fbatch2

Commits on Oct 2, 2026

Refactor wolfSSL_EVP_DigestUpdate into a chunked function so sizes above word32 max are handled correctly. (F-7103)
kareem-wolfssl
committed
bc8a9fa
Always use new key in wc_ecc_decrypt to avoid freeing passed in key. (F-7105)
kareem-wolfssl
committed
50c9ecb
Zero out the digest in SHA256/512 generation functions. (F-7135)
kareem-wolfssl
committed
878d558
Zero out SRP user and key when overwriting them. (F-7400)
kareem-wolfssl
committed
07a5464
Use subtraction-based comparison in EVP fillBuff. (F-7446)
kareem-wolfssl
committed
bde5e2f
Correct decOidSz in wc_ecc_get_curve_id_from_oid. (F-7623)
kareem-wolfssl
committed
b334acb
Avoid clamping in EncodeAttributes when attribute size exceeds capacity. (F-7624)
kareem-wolfssl
committed
2343823
Clear hash in EVP_CIPHER_MD_CTX_copy_ex before all possible returns. (F-8166)
kareem-wolfssl
committed
3c54695
Correct size documentation for wc_AesCfb1Encrypt and wc_AesCfb1Decrypt (bits not bytes). (F-9329)
kareem-wolfssl
committed
6851003
Code review feedback
kareem-wolfssl
committed
208bf80
Correct ordering of added EVP_DigestUpdate checks to match OpenSSL's behavior.
kareem-wolfssl
committed
ec2e05c
Fix failing test
kareem-wolfssl
committed
63bb10b
Code review feedback
kareem-wolfssl
committed
e1a0915
Fix wc_PKCS7_EncodeContentStream for sizes above BER_OCTET_LENGTH
kareem-wolfssl
committed
2f4ad07
Fix undersized buffers and incorrect read lengths for the file read case in unit tests.
kareem-wolfssl
committed
2c0f460
Avoid suppressing errors from wc_rng_bank_checkin in wc_rng_bank_reseed_range. (F-7414)
kareem-wolfssl
committed
3bfdf35
Code review feedback: Preserve error return code and continue running rather than exiting early in wc_rng_bank_reseed_range.
kareem-wolfssl
committed
592c478

Navigation Menu

Fix multiple Fenrir issues - #11181

Fix multiple Fenrir issues#11181
kareem-wolfssl wants to merge 17 commits into
wolfSSL:masterfrom
kareem-wolfssl:fbatch2

Commits on Oct 2, 2026

Refactor wolfSSL_EVP_DigestUpdate into a chunked function so sizes above word32 max are handled correctly. (F-7103)

Always use new key in wc_ecc_decrypt to avoid freeing passed in key. (F-7105)

Zero out the digest in SHA256/512 generation functions. (F-7135)

Zero out SRP user and key when overwriting them. (F-7400)

Use subtraction-based comparison in EVP fillBuff. (F-7446)

Correct decOidSz in wc_ecc_get_curve_id_from_oid. (F-7623)

Avoid clamping in EncodeAttributes when attribute size exceeds capacity. (F-7624)

Clear hash in EVP_CIPHER_MD_CTX_copy_ex before all possible returns. (F-8166)

Correct size documentation for wc_AesCfb1Encrypt and wc_AesCfb1Decrypt (bits not bytes). (F-9329)

Code review feedback

Correct ordering of added EVP_DigestUpdate checks to match OpenSSL's behavior.

Fix failing test

Code review feedback

Fix wc_PKCS7_EncodeContentStream for sizes above BER_OCTET_LENGTH

Fix undersized buffers and incorrect read lengths for the file read case in unit tests.

Avoid suppressing errors from wc_rng_bank_checkin in wc_rng_bank_reseed_range. (F-7414)

Code review feedback: Preserve error return code and continue running rather than exiting early in wc_rng_bank_reseed_range.