Repository navigation

PKCS#7: refuse oversized certificates-only bundles, fix reusing a wc_PKCS7 across verifies - #11655

Open

Frauschi wants to merge 7 commits into

wolfSSL:masterfrom

Frauschi:pkcs7-cert-set-overflow

Open

PKCS#7: refuse oversized certificates-only bundles, fix reusing a wc_PKCS7 across verifies#11655
Frauschi wants to merge 7 commits into
wolfSSL:masterfrom
Frauschi:pkcs7-cert-set-overflow

Commits on Nov 10, 2026
- Drop stale PKCS#7 content before freeing the stream copy
  Frauschi
  committed
  bd1c52f
- Refuse certs-only PKCS#7 bundles that overflow MAX_PKCS7_CERTS
  Frauschi
  committed
  53868c6
- Skip non-X.509 CertificateChoices in the PKCS#7 certificate set
  Frauschi
  committed
  4601073
- Raise the default MAX_PKCS7_CERTS from 4 to 8
  Frauschi
  committed
  838b5c1
- Address review feedback
  Frauschi
  committed
  bf6dd0d
- Reset the PKCS#7 state when an AuthEnvelopedData decode fails
  Frauschi
  committed
  b96cd6d
- Clear the AEAD sizes when resetting the PKCS#7 stream
  Frauschi
  committed
  223e7e0