openssl, branch feature/hqc

QUIC LCID hash table collapse on Windows/32-bit due to SipHash digest size misuse

2026-03-12T18:04:07Z

Using sizeof(unsigned long) as SipHash digest size; SipHash supports only 8 or 16 bytes. On platforms where sizeof(unsigned long) == 4, the call fails, and lcid_hash returns the zero-initialized value, degrading the hash table into list. The issue was kindly reported and fix provided by Stanislav Fort at Aisle Research. Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Neil Horman MergeDate: Thu Mar 12 18:04:10 2026 (Merged from https://github.com/openssl/openssl/pull/29814)

rand_egd: harden EGD I/O and bounds; defer fdopen until post connect

2026-03-12T17:58:12Z

Tighten RAND_query_egd_bytes and fix edge cases: * Reject nonpositive request sizes to avoid wrap when storing the length byte in tempbuf[1]. * Treat server length byte as untrusted; bound by the requested size and by sizeof(tempbuf) to avoid overrunning caller or stack buffers. * Defer fdopen until after a successful connect. On HPE NonStop (OPENSSL_SYS_TANDEM) the connect retry path may swap the socket fd; creating the FILE* early could leave a stale stream pointing at a closed descriptor, causing EBADF or short I/O, and leaking the new socket. Creating the stream after connect avoids this. * Initialize fd to -1 and close the raw fd when fdopen fails; ensure we close either FILE* or the raw fd on all error paths. * Remove unused code. Behavior is unchanged on platforms that do not swap fds during connect. On TANDEM it prevents stale I/O and descriptor leaks. Overall this improves robustness and bounds checking for EGD interactions. Signed-off-by: Joshua Rogers Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Thu Mar 12 17:58:21 2026 (Merged from https://github.com/openssl/openssl/pull/28905)

Fix a one byte buffer overflow in s_client

2026-03-12T17:56:23Z

The buffer used to process user commands when using advanced mode ("-adv") can overflow the buffer by one byte if the the read buffer is exactly BUFSIZZ bytes in length (16k). When processing the buffer we add a NUL terminator to the buffer, so if the buffer is already full then we overwrite by one byte when we add the NUL terminator. This does not represent a security issue because this is entirely local and would be "self-inflicted", i.e. not under attacker control. This issue was reported to use by Igor Morgenstern from AISLE. Reviewed-by: Paul Dale Reviewed-by: Tim Hudson Reviewed-by: Tomas Mraz MergeDate: Thu Mar 12 17:56:37 2026 (Merged from https://github.com/openssl/openssl/pull/30376)

Fix error handling in SSL_CTX_add_session

2026-03-12T17:51:33Z

An out-of-memory error in lh_SSL_SESSION_insert could trigger various use-after-free errors. Fixes #28632 Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky Reviewed-by: Neil Horman MergeDate: Thu Mar 12 17:51:38 2026 (Merged from https://github.com/openssl/openssl/pull/28636)

doc/man3/OPENSSL_malloc: clarify OPENSSL_clear_free() w/ NULL

2026-03-12T17:43:44Z

It wasn't explicitly clear that it was safe to call OPENSSL_clear_free() with a NULL because, as worded, it sounded like it may call OPENSSL_cleanse() on NULL before calling OPENSSL_free(). CLA: trivial Signed-off-by: dann frazier Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Neil Horman MergeDate: Thu Mar 12 17:43:51 2026 (Merged from https://github.com/openssl/openssl/pull/28127)

Fix stack buffer over-read in DES OFB/CFB64 via unchecked num parameter

2026-03-12T14:24:03Z

The `num` parameter in DES OFB64/CFB64 functions tracks the byte offset within an 8-byte DES block, so valid values are 0-7. However, neither the EVP set_params path nor the low-level DES functions validated this bound, allowing an out-of-range `num` to cause a stack buffer over-read when used as an array index into the 8-byte keystream buffer. Fix at two levels: 1. Provider layer: reject num >= blocksize in ossl_cipher_common_set_ctx_params() before it reaches the cipher. 2. Low-level DES: mask `*num` with `& 0x07` on entry to DES_ofb64_encrypt, DES_ede3_ofb64_encrypt, DES_cfb64_encrypt, and DES_ede3_cfb64_encrypt, consistent with how `n` is already masked at the end of these functions before being written back. Fixes #30284 Reviewed-by: Paul Dale Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz MergeDate: Thu Mar 12 14:24:12 2026 (Merged from https://github.com/openssl/openssl/pull/30332)

fix NULL pointer dereference when pass1 is NULL

2026-03-12T11:29:59Z

Resolves: https://scan5.scan.coverity.com/#/project-view/62622/10222?selectedIssue=1684201 Complements: #adc8e4abd96 Fix Memory leak in app_passwd Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale MergeDate: Thu Mar 12 11:32:05 2026 (Merged from https://github.com/openssl/openssl/pull/30365)

PKCS12: Document that the range for key length when using PBMAC1 is (1..64).

2026-03-12T10:47:27Z

Fixes #30246 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Thu Mar 12 10:47:32 2026 (Merged from https://github.com/openssl/openssl/pull/30279)

PKCS12: Avoid bypassing the provider when doing HMAC operations.

2026-03-12T10:47:27Z

pkcs12_gen_mac() now used EVP_MAC instead of direct HMAC_ calls. PBMAC1_PBKDF2_HMAC() added additional data to raised parsing errors. Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Thu Mar 12 10:47:31 2026 (Merged from https://github.com/openssl/openssl/pull/30279)

PKCS12 app fix

2026-03-12T10:47:13Z

Do not call PKCS12_verify_mac() twice if the UTF8 password matches the mac password. In the case of an error in the verify path do not print "Mac verify error: invalid password?" if there is already an error on the error stack. An error means something failed in PKCS12_verify_mac(), If only the password was wrong it does not raise an error. Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Thu Mar 12 10:47:29 2026 (Merged from https://github.com/openssl/openssl/pull/30279)