Fix memory-safety, zeroization, and error-handling findings - #1136

Merged

philljj merged 15 commits into

wolfSSL:masterfrom

ejohnstown:sf13

Aug 3, 2026

Commits on Jul 31, 2026

Zero the full k buffer in SshResourceFree
ejohnstown
committed
e53c481
Set cm->heap during CertMan init
ejohnstown
committed
f124542
examples/portfwd: fix partial-send handling in portfwd_worker
ejohnstown
committed
48028f1
DoSshPubKey: fix off-by-one null terminator
ejohnstown
committed
32a2875
examples/echoserver: check key load errors
ejohnstown
committed
4193eb8
certman: check the notAfter date parse in CheckProfile
ejohnstown
committed
df3005e
DoPemKey: pass isPrivate through to key identification
ejohnstown
committed
b7dd9ce
examples/client: fix public key buffer leak
ejohnstown
committed
96c65ce
wolfsshd: zero the crypt() hash after comparing
ejohnstown
committed
7f5ec2e
wolfsshd: compare the terminated copy in GetConfigInt
ejohnstown
committed
8c675c8
keygen: don't free keys that failed init
ejohnstown
committed
ce5dab0
agent: null check ssh->agent in worker
ejohnstown
committed
29c6b58
wolfsftp: clear ret before the NAME loop
ejohnstown
committed
a89183d
internal: full-width AEAD nonce increment
ejohnstown
committed
44d164b
examples/portfwd: always retry the buffered send
ejohnstown
committed
2e4a36b