openssl/ssl/ech, branch dependabot/github_actions/actions/setup-python-7

ech: check memory failure in vpm allocation in store final check

2026-07-27T16:36:03Z

This fixes issue found by fuzz test in updated corpora for echconfiglist_parser. Reviewed-by: Norbert Pocs Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Mon Jul 27 16:36:15 2026 (Merged from https://github.com/openssl/openssl/pull/32070)

Use %zu for printing size_t values

2026-06-15T19:24:36Z

Reviewed-by: Neil Horman Reviewed-by: Richard Levitte Reviewed-by: Milan Broz MergeDate: Mon Jun 15 19:24:43 2026 (Merged from https://github.com/openssl/openssl/pull/31454)

Make ssl includes self-contained

2026-05-06T11:35:24Z

Reviewed-by: Tomas Mraz Reviewed-by: Nikola Pajkovsky Reviewed-by: Norbert Pocs MergeDate: Wed May 6 11:35:50 2026 (Merged from https://github.com/openssl/openssl/pull/31001)

curl ECH+QUIC fix

2026-04-11T18:29:36Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell MergeDate: Sat Apr 11 18:29:37 2026 (Merged from https://github.com/openssl/openssl/pull/30727)

ECH: conformance test changes for echspec test tool

2026-04-08T08:59:18Z

Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz MergeDate: Wed Apr 8 08:59:20 2026 (Merged from https://github.com/openssl/openssl/pull/30419)

ECH: Conformance test changes in response to AISLE review

2026-04-08T08:59:01Z

Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz MergeDate: Wed Apr 8 08:59:19 2026 (Merged from https://github.com/openssl/openssl/pull/30419)

ech: fix off-by-one in hpke_decrypt_encch extensions length bounds check

2026-03-20T18:04:09Z

The bounds check before reading the two-byte extensions length field uses extsoffset + 1 instead of extsoffset + 2: if ((extsoffset + 1) > clearlen) { goto paderr; } extslen = clear[extsoffset] * 256 + clear[extsoffset + 1]; When extsoffset == clearlen - 1 the check passes, but the second read clear[extsoffset + 1] is clear[clearlen], which is one byte beyond the decrypted plaintext. The allocation is OPENSSL_malloc(cipherlen) where cipherlen = clearlen + AEAD_overhead, so the address is valid, but the byte is uninitialised after OSSL_HPKE_open returns. Using Valgrind confirmed an uninitialised-value read at this location via the full server handshake path: hpke_decrypt_encch (ech_internal.c) ossl_ech_early_decrypt tls_process_client_hello state_machine SSL_do_handshake The subsequent ch_len > clearlen check (line 1875) acts as a safety net and prevents the stale byte from being used further, so the practical impact is a forced decode error rather than memory disclosure. Nevertheless, the read itself is incorrect and should be fixed. Fix: change the guard to extsoffset + 2 so that both bytes of the extensions length field are confirmed to be within the decrypted buffer before either is read. This issue was identified through AI-assisted structural analysis (RAPTOR) using CodeQL database tooling (AST analysis, control flow verification, dominator tree analysis) against the OpenSSL master branch. The off-by-one was confirmed via AST inspection showing GT(Add(extsoffset, 1), clearlen) instead of the expected GT(Add(extsoffset, 2), clearlen). Found by myself @danielcuthbert and validated by Benjamin Rodes - Microsoft @bdrodes. CLA: trivial Fixes: 6c3edd4f3a8a "Add server-side handling of Encrypted Client Hello" Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Eugene Syromiatnikov MergeDate: Fri Mar 20 18:07:01 2026 (Merged from https://github.com/openssl/openssl/pull/30472)

ECH: chunk-size bug fix and non-regression changes

2026-03-19T10:35:54Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell MergeDate: Thu Mar 19 10:35:56 2026 (Merged from https://github.com/openssl/openssl/pull/30417)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

add check before releaseing retry-configs

2026-03-02T09:55:27Z

Reviewed-by: Paul Dale Reviewed-by: Matt Caswell MergeDate: Mon Mar 2 09:55:44 2026 (Merged from https://github.com/openssl/openssl/pull/30175)