20260424-fixes#10308

Merged

dgarske merged 13 commits intowolfSSL:masterfrom

douzzer:20260424-fixes

Apr 25, 2026

Commits on Apr 25, 2026

linuxkm/lkcapi_ecdsa_glue.c: in km_ecdsa_verify(), add checks on hash_len following pattern of #10131, before calling wc_ecc_verify_hash(), for defense-in-depth.
douzzer
committed
tests/api.c: fix -Wnull-dereferences in wolfSSL_UseSecureRenegotiation().
douzzer
committed
tests/api/test_pkcs7.c: in test_wc_PKCS7_BER(), in expected-failure wc_PKCS7_DecodeEnvelopedData() in WOLFSSL_SP_MATH build, allow failure with either WC_KEY_SIZE_E or BUFFER_E, to accommodate blin…
douzzer
committed
wolfcrypt/test/test.c and wolfcrypt/test/test.h: fix gating for dsa_test() and srp_test() prototypes to avoid -Wunused-function in --enable-sp-math builds.
douzzer
committed
.github/workflows/:
douzzer
committed
wolfcrypt/test/test.c: in random_bank_test(), accommodate WOLFSSL_DRBG_SHA512 in the WC_RNG_BANK_FLAG_NO_VECTOR_OPS test;
douzzer
committed
wolfssl/wolfcrypt/random.h: fix "comma at end of enumerator list [-Werror=pedantic]" in enum wc_DrbgType.
douzzer
committed
configure.ac:
douzzer
committed
src/ssl_load.c: fix -Wnull-dereference in wolfssl_ctx_set_tmp_dh() (detected by armel build);
douzzer
committed
tests/api.c: fix false-positive -Wmaybe-uninitialized in test_wolfSSL_clear_secure_renegotiation() with --enable-all CFLAGS=-Og.
douzzer
committed
.github/workflows/: add -Wnull-dereferences to a few -pedantic scenarios missed in the first pass.
douzzer
committed
configure.ac: for FIPS v6 setup, explicitly set WOLFSSL_NOSHA512_224 and WOLFSSL_NOSHA512_256;
douzzer
committed
configure.ac: fix to allow SHAKE force-off FIPS lean-aesgcm setup.
douzzer
committed