main

DDongjianwei001Fixed missing validation and memory issues

d5d0f8f3创建于 6 天前历史提交

文件	最后提交记录	最后更新时间
asn1	fix(crypto/bsl): fix bsl and ml-kem security check Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1424	1 个月前
base64	Fix insufficient buffer size calculation for base64 encoding Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1392	1 个月前
buffer	Correction of crypto error stack Co-authored-by: xuzhengyi<xuzhengyi1@h-partners.com> # message auto-generated for no-merge-commit merge: !944 merge FIX_BUG into main Correction of crypto error stack Created-by: libiaoliang Commit-by: xuzhengyi Merged-by: liwei3013 Description: Correction of crypto error stack See merge request: openHiTLS/openhitls!944	4 个月前
err	fix(crypto/bsl): fix bsl and ml-kem security check Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1424	1 个月前
hash	fix: remove hash erase shrink and harden resize boundary checks - remove shrink-on-erase behavior from the hash table - avoid partial split state advancement on level-transition realloc failure - fix NULL-hash handling in BSL_HASH_At and iterator value accessors - make create-time allocation checks match the actual list-array allocation size - use proper uint32_t overflow checks in resize arithmetic - free the last removed raw-list node through freeFunc - add SDV coverage for no-shrink erase iteration and hash boundary cases Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1314	1 个月前
list	fix(crypto/bsl): fix bsl and ml-kem issue Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1424	1 个月前
log	Support Pure cmake build build: Migrate build system from Python/JSON/CMake hybrid to pure CMake The previous build system mixed Python scripts and JSON configuration files with CMake, scattering build logic across multiple languages and formats. This made the system hard to understand and maintain, and required a Python interpreter at configure time. The build system has been rewritten entirely in CMake. Feature flags, dependency resolution, platform detection, compiler options, and config-header generation are now all expressed natively in CMake. For more details, see the "Build and Installation" section in README.md.	2 个月前
obj	feat: Add PQC certificate support to the protocol layer Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1574	15 天前
params	Fixed missing validation and memory issues Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1597	6 天前
pem	Fix code review issues The main issues are concentrated on: the strictness of CMS attributes, the PBKDF2 iteration count for enc decryption file headers, the length estimation of stream-based Base64 encoding and decoding, the length accumulation of BSL_ParamMaker, the input length accumulation of PAKE KDF, the length accumulation of SPAKE2+ transcript, the UIO handle leakage in configuration files, and the issuance policy risk of x509 -copy_extensions copyall. Multiple alerts such as PAKE register stack overflow and double-free, ElGamal output length, one-time Base64 encoding, etc., are no longer valid in the current source code. It is suspected that these are false positives caused by old code results or repeated/truncated automated reports. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1394	1 个月前
sal	fix(crypto/bsl): fix bsl and ml-kem issue Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1424	1 个月前
tlv	Correction of crypto error stack Co-authored-by: xuzhengyi<xuzhengyi1@h-partners.com> # message auto-generated for no-merge-commit merge: !944 merge FIX_BUG into main Correction of crypto error stack Created-by: libiaoliang Commit-by: xuzhengyi Merged-by: liwei3013 Description: Correction of crypto error stack See merge request: openHiTLS/openhitls!944	4 个月前
uio	fix(bsl/uio): support zero-length UDP datagrams - allow UDP UIO read to return success with readLen == 0 for valid empty datagrams - allow SAL sendto wrappers to send zero-length UDP datagrams - only record errno for sendto/recvfrom on real failures - add a UDP UIO regression testcase that sends and receives an empty datagram through SAL/UIO wrappers Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1444	1 个月前