Skip to content

Fenrir fixes#10136

Open
JeremiahM37 wants to merge 4 commits intowolfSSL:masterfrom
JeremiahM37:fenrir-issues-2
Open

Fenrir fixes#10136
JeremiahM37 wants to merge 4 commits intowolfSSL:masterfrom
JeremiahM37:fenrir-issues-2

Conversation

@JeremiahM37
Copy link
Copy Markdown
Contributor

@JeremiahM37 JeremiahM37 commented Apr 6, 2026

Fixes F-1916, F-1907, F-1911, F-1915, F-1909, F-1913, F-1914

  • Fix NULL drbg pointer dereference in wc_RNG_DRBG_Reseed on non-Intel platforms when HAVE_INTEL_RDSEED/HAVE_INTEL_RDRAND are not defined
  • Save key->heap before wc_FreeRsaKey in wc_DeleteRsaKey to prevent use-after-free on the heap hint
  • Add NULL parameter checks to Base64_Decode, Base64_Decode_nonCT, and DoBase64_Encode matching existing Base16_Decode pattern
  • Reject non-block-aligned input with BAD_LENGTH_E in RC2, Camellia, and DES/DES3 CBC encrypt/decrypt instead of silently truncating

@JeremiahM37 JeremiahM37 changed the title Fenrir issues 2 Fenrir fixes Apr 6, 2026
@JeremiahM37 JeremiahM37 changed the title Fenrir fixes wolfcrypt Fenrir fixes Apr 6, 2026
@JeremiahM37 JeremiahM37 changed the title wolfcrypt Fenrir fixes Fenrir fixes Apr 6, 2026
Copy link
Copy Markdown

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10136

Scan targets checked: wolfcrypt-api_misuse, wolfcrypt-bugs, wolfcrypt-compliance, wolfcrypt-concurrency, wolfcrypt-port, wolfcrypt-port-bugs, wolfcrypt-portability, wolfcrypt-src

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

@JeremiahM37 JeremiahM37 marked this pull request as ready for review April 7, 2026 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants