Memory-safety, zeroization, and correctness fixes across agent, SFTP, terminal, FPKI, and transport - #1103

Merged

ejohnstown merged 22 commits into

wolfSSL:masterfrom

aidangarske:fenrir-lowmed-fixes

Jul 20, 2026

Commits on Jul 20, 2026

F-4582 - Use WOLFSSH_ prefix for default logging callback opt-out
aidangarske
committed
d840f84
F-6268 - Fix Windows SFTP GET resume check to test gOfst elements
aidangarske
committed
7600be0
F-4592 - Bound agent FindKeyId keyBlob compare by stored length
aidangarske
committed
5c46814
F-6693 - Reject zero-length agent message payload in DoMessage
aidangarske
committed
ecebe61
F-2082 - Zeroize agent private key buffer with ForceZero before free
aidangarske
committed
818d119
F-6694 - Return error instead of hanging in AGENT_worker on NULL ssh
aidangarske
committed
48cd39e
F-3881 - Reserve separator and NUL in RealPath segment bound check
aidangarske
committed
9896f5d
F-5852 - Only treat /.. as parent traversal in CleanPath
aidangarske
committed
d52f978
F-4795 - Guard ClientPublicKeyCheck against short public key blob
aidangarske
committed
8960fe2
F-3210 - Null-check command allocation in client argument parsing
aidangarske
committed
c6df30e
F-4583 - Remove vestigial zero-length read in echoserver global_req
aidangarske
committed
d91c3aa
F-3446 - Bound default password copy to userPassword buffer size
aidangarske
committed
f595a1e
F-1278 - Zeroize ML-KEM client private key after decapsulation
aidangarske
committed
3900ae6
F-3453 - Free and zeroize host key DER on key-count error path
aidangarske
committed
14d86c2
F-6277 - Zeroize SFTP GET and PUT file buffers before freeing state
aidangarske
committed
4304fee
F-4794 - Bound CSI control sequence read and reset escape state
aidangarske
committed
218030e
F-4106 - Write only the newline byte to console, not the NUL
aidangarske
committed
6dbe879
F-4105 - Write only bytes read to Windows stdout handle
aidangarske
committed
77f9314
F-4108 - Build full path and check lstat return in QNX Include scan
aidangarske
committed
7628e84
F-5900 - Require SHA-256+ signature algorithm in FPKI CheckProfile
aidangarske
committed
edb1bf7
F-6698 - Bound SFTP handle length against received packet size
aidangarske
committed
5c11893
F-6703 - Add AES-GCM tamper rejection test for DoReceive
aidangarske
committed
fc89265

Navigation Menu

Uh oh!

Memory-safety, zeroization, and correctness fixes across agent, SFTP, terminal, FPKI, and transport - #1103

Memory-safety, zeroization, and correctness fixes across agent, SFTP, terminal, FPKI, and transport#1103
ejohnstown merged 22 commits into
wolfSSL:masterfrom
aidangarske:fenrir-lowmed-fixes

Commits on Jul 20, 2026

F-4582 - Use WOLFSSH_ prefix for default logging callback opt-out

F-6268 - Fix Windows SFTP GET resume check to test gOfst elements

F-4592 - Bound agent FindKeyId keyBlob compare by stored length

F-6693 - Reject zero-length agent message payload in DoMessage

F-2082 - Zeroize agent private key buffer with ForceZero before free

F-6694 - Return error instead of hanging in AGENT_worker on NULL ssh

F-3881 - Reserve separator and NUL in RealPath segment bound check

F-5852 - Only treat /.. as parent traversal in CleanPath

F-4795 - Guard ClientPublicKeyCheck against short public key blob

F-3210 - Null-check command allocation in client argument parsing

F-4583 - Remove vestigial zero-length read in echoserver global_req

F-3446 - Bound default password copy to userPassword buffer size

F-1278 - Zeroize ML-KEM client private key after decapsulation

F-3453 - Free and zeroize host key DER on key-count error path

F-6277 - Zeroize SFTP GET and PUT file buffers before freeing state

F-4794 - Bound CSI control sequence read and reset escape state

F-4106 - Write only the newline byte to console, not the NUL

F-4105 - Write only bytes read to Windows stdout handle

F-4108 - Build full path and check lstat return in QNX Include scan

F-5900 - Require SHA-256+ signature algorithm in FPKI CheckProfile

F-6698 - Bound SFTP handle length against received packet size

F-6703 - Add AES-GCM tamper rejection test for DoReceive