Skip to content

Fix object class, key type and store name checks from Fenrir findings - #263

Merged
Frauschi merged 8 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-15369-15408-15434-15435-15437
Oct 22, 2026
Merged

Frauschi merged 8 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-15369-15408-15434-15435-15437

Conversation

@aidangarske

@aidangarske aidangarske commented Oct 20, 2026 •

Copy link
Copy Markdown
Member
F-15369, F-15408, F-15434, F-15435, F-15437 

@LinuxJedi

Copy link
Copy Markdown
Member

Please do not merge this until after 2.2 is released.

@LinuxJedi

Copy link
Copy Markdown
Member

2.2 tagged, you may continue.

@Frauschi Frauschi left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for splitting this up per finding, it made it easy to follow. The main concerns are compatibility: token keys stored with class -1 before this change become unusable, and CKM_HKDF_DATA without CKA_CLASS stops working. Both reproduced against master vs this branch. The rest are ordering, error code and test gaps.

Comment thread src/crypto.c
Comment thread src/crypto.c Outdated
Comment thread src/crypto.c
Comment thread src/crypto.c
Comment thread src/crypto.c Outdated
Comment thread src/internal.c Outdated
Comment thread src/internal.c Outdated
Comment thread tests/token_path_test.c Outdated
@Frauschi Frauschi assigned aidangarske and unassigned Frauschi Oct 21, 2026
@aidangarske

Copy link
Copy Markdown
Member Author

looks like failures are from alpine upstream fyi

@aidangarske
aidangarske requested a review from Frauschi October 21, 2026 19:22
@Frauschi
Frauschi merged commit 979895f into wolfSSL:master Oct 22, 2026
100 of 106 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants