Fenrir fixes#10601

Open

kareem-wolfssl wants to merge 8 commits into

wolfSSL:masterfrom

kareem-wolfssl:f3772

Commits on Jun 8, 2026

Properly set ret and error out when tsip_RsakeyImport fails.
kareem-wolfssl
committed
Confirm rng pointer is not NULL before dereferencing it in wc_rng_new_ex.
kareem-wolfssl
committed
Fix wc_tsip_MakeRsaKey ignoring errors and not freeing buffers in some error cases.
kareem-wolfssl
committed
Confirm keys-params is not NULL before dereferencing in wc_XmssKey_GetPubLen.
kareem-wolfssl
committed
Reject auth tags below WOLFSSL_MIN_AUTH_TAG_SZ in the AES-EAX encrypt path. This matches AES-EAX decrypt behavior as well as other AES modes.
kareem-wolfssl
committed
Avoid suppressing error from Cy_Crypto_Core_Sha_Finish in wc_Sha512_224Final.
kareem-wolfssl
committed
Change no_renegotiation alert to warning level to match RFC 5246 7.2.2.
kareem-wolfssl
committed
Add unit test for wc_AesEaxEncryptFinal authTagSz below minimum.
kareem-wolfssl
committed