openssl/fuzz, branch feature/hqc

Fix clang-format: remove leading space from err label

2026-03-11T20:58:36Z

Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:54 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

Remove unnecessary comments and extra blank line

2026-03-11T20:58:36Z

Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:51 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

Remove unnecessary caps in key/iv initialization loops

2026-03-11T20:58:36Z

Drop the `&& i < 16` and `&& i < 8` guards that were carried over from the original fixed-size arrays. The loops now fill the entire heap-allocated buffer, with values wrapping naturally via unsigned char. Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:49 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

Refactor do_evp_cipher error paths to use goto err

2026-03-11T20:58:36Z

Initialize key, iv, and ctx to NULL at declaration and consolidate all cleanup into a single err label, as suggested by @npajkovsky. Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:47 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

fuzz/provider.c: fix API call order in do_evp_cipher and do_evp_md

2026-03-11T20:58:36Z

Both do_evp_cipher() and do_evp_md() call the parameter-setting function (EVP_CIPHER_CTX_set_params / EVP_MD_CTX_set_params) before initializing the algorithm context (EVP_EncryptInit_ex2 / EVP_DigestInit_ex2). Since the context has no algorithm associated at that point, set_params always returns 0 and the function early-returns, making the cipher and digest paths dead code (~20% of all fuzzer inputs). Fix by swapping the call order so the context is initialized first. Additionally, heap-allocate key/iv buffers sized to the cipher's actual key and IV length, since some ciphers (e.g. DES-EDE3-OFB) require buffers larger than the previous fixed 16/8-byte arrays. Fixes #30281 Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:44 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

Removes fixed version TLS methods.

2026-02-24T21:19:35Z

Fixes #28343 Reviewed-by: Kurt Roeckx Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Paul Dale Reviewed-by: Neil Horman MergeDate: Tue Feb 24 21:19:39 2026 (Merged from https://github.com/openssl/openssl/pull/30128)

update fuzz/corpora submodule

2026-01-19T08:42:45Z

Signed-off-by: Nikola Pajkovsky Reviewed-by: Norbert Pocs Reviewed-by: Kurt Roeckx (Merged from https://github.com/openssl/openssl/pull/29670)

Add an OID for "id-alg-hss-lms-hashsig"

2026-01-13T10:13:33Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Tue Jan 13 10:13:35 2026 (Merged from https://github.com/openssl/openssl/pull/29599)

fuzz/cmp.c: Correct the usages of BIO_new()

2026-01-12T18:39:23Z

Use BIO_free() to free "in" if error occurs to avoid memory leak. Moreover, add check for "out" to avoid NULL pointer dereference. Also replace OPENSSL_assert with return. Fixes: e599d0a ("Add CMP fuzzing to fuzz/cmp.c, including a couple of helpers in crypto/cmp/") Signed-off-by: Jiasheng Jiang Reviewed-by: Matt Caswell Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Tomas Mraz MergeDate: Mon Jan 12 18:40:14 2026 (Merged from https://github.com/openssl/openssl/pull/27920)