Files
third_party_openhitls/testcode/framework/tls
balabala-123 a795c69f61 fix:Fix the issues found in the security audit
1. The IdentityHint parsed from ParseServerIdentityHint does not have a \0 terminator
2. ConsumeHandshakeMessage` does not perform length verification when reading the message after the header
3. There is a problem with the implementation of HITLS_SESS_Decode. The first parameter passed is an output parameter
4. When retransmitting the ccs voyage message in REC_RetransmitListFlush, if the call to REC_DeActiveOutdatedWriteState(ctx) to switch states fails before ccs
5. Descriptions of store ownership need to be added for HITLS_SetCertStore, HITLS_SetChainStore, and HITLS_SetVerifyStore
6. The header file HITLS_CFG_SetSessionCacheSize lacks a description of the behavior when cachesize is set to 0
7. When there is only a cookie and no keyshare in the hrr, the generation of keyshare fails when sending the second clienthello

Signed-off-by: balabala-123 <guozhang4@huawei.com>

Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1448

Signed-off-by: Dongjianwei001 <dongjianwei1@huawei.com>
2026-05-20 20:29:41 +08:00
..
2025-04-30 15:06:59 +08:00
2026-04-01 18:46:46 +08:00
2026-03-30 19:50:35 +08:00