Skip to content

Various PKCS12 Fixes#10378

Open
rlm2002 wants to merge 7 commits intowolfSSL:masterfrom
rlm2002:fenrir
Open

Various PKCS12 Fixes#10378
rlm2002 wants to merge 7 commits intowolfSSL:masterfrom
rlm2002:fenrir

Conversation

@rlm2002
Copy link
Copy Markdown
Contributor

@rlm2002 rlm2002 commented May 1, 2026

Description

  • Fix cast to int. - wc_d2i_PKCS12 casts int* to word32* violating strict aliasing and breaking on 16-bit platforms (F-1544)
  • Zeroize buffers - PKCS12 PBKDF Missing ForceZero on Password-Containing Buffer (F- 1255), PKCS12 Parse Decrypted Private Key Buffer Freed Without ForceZero (F-1993)
  • Check buffer bounds - PKCS12 and wc_CryptKey Unicode Password Size Check Integer Overflow Bypasses Stack Buffer Bounds Check (F-2244), PKCS12 and wc_CryptKey Unicode Password Size Check Integer Overflow Bypasses Stack Buffer Bounds Check (F-2245)

Also incorporates fixes for an issue internally found by AI and one in 10233

Testing

./configure --enable-all && make check

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 1, 2026

MemBrowse Memory Report

No memory changes detected for:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant