Memory-safety, zeroization, and correctness fixes across agent, SFTP, terminal, FPKI, and transport#1103

Open

aidangarske wants to merge 24 commits into

wolfSSL:masterfrom

aidangarske:fenrir-lowmed-fixes

Commits on Jul 10, 2026

F-4582 - Use WOLFSSH_ prefix for default logging callback opt-out
aidangarske
committed
F-2869 - Raise default DH-GEX client minimum to 2048 bits
aidangarske
committed
F-6268 - Fix Windows SFTP GET resume check to test gOfst elements
aidangarske
committed
F-4592 - Bound agent FindKeyId keyBlob compare by stored length
aidangarske
committed
F-6693 - Reject zero-length agent message payload in DoMessage
aidangarske
committed
F-1684 - Do not log agent passphrase and zeroize it after use
aidangarske
committed
F-2082 - Zeroize agent private key buffer with ForceZero before free
aidangarske
committed
F-6694 - Return error instead of hanging in AGENT_worker on NULL ssh
aidangarske
committed
F-3881 - Reserve separator and NUL in RealPath segment bound check
aidangarske
committed
F-5852 - Only treat /.. as parent traversal in CleanPath
aidangarske
committed
F-4795 - Guard ClientPublicKeyCheck against short public key blob
aidangarske
committed
F-3210 - Null-check command allocation in client argument parsing
aidangarske
committed
F-4583 - Remove vestigial zero-length read in echoserver global_req
aidangarske
committed
F-3446 - Bound default password copy to userPassword buffer size
aidangarske
committed
F-1278 - Zeroize ML-KEM client private key after decapsulation
aidangarske
committed
F-3453 - Free and zeroize host key DER on key-count error path
aidangarske
committed
F-6277 - Zeroize SFTP GET and PUT file buffers before freeing state
aidangarske
committed
F-4794 - Bound CSI control sequence read and reset escape state
aidangarske
committed
F-4106 - Write only the newline byte to console, not the NUL
aidangarske
committed
F-4105 - Write only bytes read to Windows stdout handle
aidangarske
committed
F-4108 - Build full path and check lstat return in QNX Include scan
aidangarske
committed
F-5900 - Require SHA-256+ signature algorithm in FPKI CheckProfile
aidangarske
committed
F-6698 - Bound SFTP handle length against received packet size
aidangarske
committed
F-6703 - Add AES-GCM tamper rejection test for DoReceive
aidangarske
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Memory-safety, zeroization, and correctness fixes across agent, SFTP, terminal, FPKI, and transport#1103

Memory-safety, zeroization, and correctness fixes across agent, SFTP, terminal, FPKI, and transport#1103
aidangarske wants to merge 24 commits into
wolfSSL:masterfrom
aidangarske:fenrir-lowmed-fixes

Commits on Jul 10, 2026

F-4582 - Use WOLFSSH_ prefix for default logging callback opt-out

F-2869 - Raise default DH-GEX client minimum to 2048 bits

F-6268 - Fix Windows SFTP GET resume check to test gOfst elements

F-4592 - Bound agent FindKeyId keyBlob compare by stored length

F-6693 - Reject zero-length agent message payload in DoMessage

F-1684 - Do not log agent passphrase and zeroize it after use

F-2082 - Zeroize agent private key buffer with ForceZero before free

F-6694 - Return error instead of hanging in AGENT_worker on NULL ssh

F-3881 - Reserve separator and NUL in RealPath segment bound check

F-5852 - Only treat /.. as parent traversal in CleanPath

F-4795 - Guard ClientPublicKeyCheck against short public key blob

F-3210 - Null-check command allocation in client argument parsing

F-4583 - Remove vestigial zero-length read in echoserver global_req

F-3446 - Bound default password copy to userPassword buffer size

F-1278 - Zeroize ML-KEM client private key after decapsulation

F-3453 - Free and zeroize host key DER on key-count error path

F-6277 - Zeroize SFTP GET and PUT file buffers before freeing state

F-4794 - Bound CSI control sequence read and reset escape state

F-4106 - Write only the newline byte to console, not the NUL

F-4105 - Write only bytes read to Windows stdout handle

F-4108 - Build full path and check lstat return in QNX Include scan

F-5900 - Require SHA-256+ signature algorithm in FPKI CheckProfile

F-6698 - Bound SFTP handle length against received packet size

F-6703 - Add AES-GCM tamper rejection test for DoReceive