Skip to content

Conversation

@rlm2002
Copy link
Contributor

@rlm2002 rlm2002 commented Jan 12, 2026

Description

Update WC_CALLOC_VAR_EX, now calls XMEMSET properly. Uses sizeof(VAR_TYPE)
(CID 556176-556182: Uninitialized scalar variable)

Add length checks for TLS extensions supported_versions and KeyShare based on RFC 8446 and 9147
(CID 487950/487948: Untrusted loop bound)

Add cleanup for table and iTable variables in sakke_kat_derive_test() once set by XMALLOC().
CID 420937: Resource leak

Testing

./configure --enable-all && make check
./configure --enable-all --enable-sakke && make check

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

@rlm2002 rlm2002 changed the title Coverity 20260112 Coverity: update macros and add length checks Jan 12, 2026
@rlm2002 rlm2002 self-assigned this Jan 13, 2026
@rlm2002
Copy link
Contributor Author

rlm2002 commented Jan 13, 2026

retest this please jenkins: PRB-generic-config-parser: was not stable -> Found unhandled org.jenkinsci.plugins.workflow.support.steps.AgentOfflineException exception:

@rlm2002 rlm2002 marked this pull request as ready for review January 13, 2026 16:30
@rlm2002 rlm2002 assigned wolfSSL-Bot and unassigned rlm2002 Jan 13, 2026
switch WC_ALLOC_VAR_EX with XMEMSET to WC_CALLOC_VAR_EX

fix XMEMSET call for WC_CALLOC_VAR_EX
add length check to tls extensions
@rlm2002
Copy link
Contributor Author

rlm2002 commented Jan 14, 2026

retest this please Jenkins. PRB-generic-config-parser was unstable: Found unhandled org.jenkinsci.plugins.workflow.support.steps.AgentOfflineException exception

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants