openssl/crypto/punycode.c, branch openssl-3.5.6

Copyright year updates

2026-04-07T12:24:29Z

Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Apr 7 12:24:30 2026 Release: yes

Fix const qualifiers from strchr where discarded

2026-02-25T11:06:09Z

This patch fixes several const qualifiers byu adding where required. warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers] Since glibc-2.43 and ISO C23, the functions bsearch, memchr, strchr, strpbrk, strrchr, strstr, wcschr, wcspbrk, wcsrchr, wcsstr and wmemchr that return pointers into their input arrays now have definitions as macros that return a pointer to a const-qualified type when the input argument is a pointer to a const-qualified type. Signed-off-by: Rudi Heitbaum Reviewed-by: Dmitry Belyavskiy Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Neil Horman MergeDate: Wed Feb 25 11:04:09 2026 (Merged from https://github.com/openssl/openssl/pull/30136) (cherry picked from commit 2af8d3b6400ba5f7133cbbd48a557d10af21c6a6)

3.5-POST-CLANG-FORMAT-WEBKIT

2025-12-09T09:40:50Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29262)

Copyright year updates

2023-09-07T08:59:15Z

Reviewed-by: Richard Levitte Release: yes

Add more punycode tests and remove ossl_a2ucompare()

2023-02-08T15:17:37Z

The unused and untested internal function ossl_a2ucompare() has been removed. Reviewed-by: Paul Dale Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/20177)

punycode: update to use WPACKET instead of using custom range checking

2022-11-10T21:14:47Z

Add test for `.' overflows, remove the output size argument from ossl_a2ulabel() since it was never used and greatly complicated the code. Convert ossl_a2ulabel() to use WPACKET for building the output string. Update the documentation to match the new definition of ossl_a2ulabel(). x509: let punycode handle the '\0' string termination. Saves a memset(3) and some size fiddling. Also update to deal with the modified parameters. Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/19591)

Fix CVE-2022-3786 in punycode decoder.

2022-11-01T16:44:49Z

Fixed the ossl_a2ulabel() function which also contained a potential buffer overflow, albeit without control of the contents. This overflow could result in a crash (causing a denial of service). The function also did not NUL-terminate the output in some cases. The two issues fixed here were dentified and reported by Viktor Dukhovni while researching CVE-2022-3602. Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (cherry picked from commit c42165b5706e42f67ef8ef4c351a9a4c5d21639a)

Fix CVE-2022-3602 in punycode decoder.

2022-11-01T16:43:55Z

An off by one error in the punycode decoder allowed for a single unsigned int overwrite of a buffer which could cause a crash and possible code execution. Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (cherry picked from commit fe3b639dc19b325846f4f6801f2f4604f56e3de3)

Move more general parts of internal/cryptlib.h to new internal/common.h

2021-11-17T14:48:37Z

Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/15847)

Add and use HAS_PREFIX() and CHECK_AND_SKIP_PREFIX() for checking if string has literal prefix

2021-11-17T14:48:34Z

Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/15847)