Fenrir fixes 2026 06 05#128

Merged

gasbytes merged 13 commits into

wolfSSL:masterfrom

danielinux:fenrir-fixes-2026-06-05

Jun 5, 2026

Commits on Jun 5, 2026

F-4389: cap WRQ tsize against max_image_size before io.open
danielinux
committed
F-4254: prevent uint32_t overflow bypassing TFTP client RRQ size cap
danielinux
committed
F-4253: prevent uint32_t overflow bypassing TFTP server WRQ size cap
danielinux
committed
F-5783: enforce max_image_size and prevent offset overflow on TFTP RRQ send
danielinux
committed
F-4768: reject unsolicited OACK options not present in client RRQ
danielinux
committed
F-4765: coalesce retransmitted TFTP requests onto existing session
danielinux
committed
F-4781: revalidate fd slot after blocking wait to prevent cross-connection disclosure
danielinux
committed
F-5072: revalidate listener slot after accept poll to prevent fd-slot reuse
danielinux
committed
F-5259: derive HTTP body length from Content-Length to prevent CL.0 smuggling
danielinux
committed
F-5258: stop httpd_get_request_arg at NUL to prevent OOB read past query/body
danielinux
committed
F-5012: hold DNS wait slot until reaped to prevent concurrent getaddrinfo cross-contamination
danielinux
committed
F-4950: negate wolfIP error code when setting errno in POSIX shim macros
danielinux
committed
Addressed Copilot's comments
danielinux
committed