Skip to content

Conversation

@tmael
Copy link
Contributor

@tmael tmael commented Jan 19, 2026

Description

Adds checks for the validity of the seed buffer and the seedSz parameter. When seedSz is less than SEED_BLOCK_SZ (Word32 = 4), the loop can underflow and iterate to the Word32 limit, resulting in an infinite loop and a crash.

Updates wc_AesEncryptDirect to return a negative error code when the input data buffer is NULL. Previously, the function returned 0 and exhibited undefined behavior.

Fixed in https://github.com/wolfSSL/wolfBoot-private/pull/70

Testing

How did you test?

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

@tmael tmael self-assigned this Jan 19, 2026
@dgarske dgarske requested a review from rizlik January 20, 2026 18:52
@tmael
Copy link
Contributor Author

tmael commented Jan 21, 2026

Jenkins retest this please

1 similar comment
@tmael
Copy link
Contributor Author

tmael commented Jan 21, 2026

Jenkins retest this please

@tmael tmael removed their assignment Jan 21, 2026
@dgarske
Copy link
Contributor

dgarske commented Jan 21, 2026

Jenkins retest this please: "RequestAbortedException"

@dgarske dgarske merged commit 11ddec3 into wolfSSL:master Jan 21, 2026
405 of 406 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants