openssl/util/perl, branch dependabot/github_actions/actions/setup-python-7

Reject unknown TLS 1.3 ServerHello extensions

2026-07-23T15:55:07Z

TLS 1.3 does not permit clients to ignore unknown extensions in ServerHello or HelloRetryRequest. Add a validation pass for these messages so fully unknown extension types fail early with unsupported_extension. Keep the existing ignore behavior for other extension contexts and leave TLS 1.2 ServerHello processing unchanged. Add TLSProxy coverage for the TLS 1.3 ServerHello case. Correct the unknown-extension path in tls_collect_extensions(). Collection still runs before the new TLS 1.3 validation, and verify_extension() returns success with thisex == NULL for fully unknown extension types. The previous idx calculation used invalid pointer arithmetic on NULL in that path. Map unknown extensions explicitly outside the built-in extension range instead, preserving the existing ignore semantics while avoiding undefined behavior. Update the truncated HRR ECH corruption vector to keep testing malformed ECH length after the new unknown-extension validation. The old 0xdddd bytes were only padding to preserve the replacement length, but they now trigger the unknown-extension check before the ECH parser. Use a known HRR cookie extension as padding so the test still reaches the intended SSL_R_LENGTH_MISMATCH path. Reviewed-by: Andrew Dinh Reviewed-by: Daniel Kubec Reviewed-by: Tomas Mraz MergeDate: Thu Jul 23 15:55:09 2026 (Merged from https://github.com/openssl/openssl/pull/31086)

test: include PID in valgrind log file names

2026-07-20T09:06:53Z

Append the %p (process ID) placeholder to valgrind's --log-file in both app() and test(). When a test spawns multiple processes sharing the same result index, they previously wrote to the same log file and clobbered each other's output. Using %p gives each process its own log, so no valgrind findings are lost. Signed-off-by: Nikola Pajkovsky Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Neil Horman MergeDate: Mon Jul 20 09:07:07 2026 (Merged from https://github.com/openssl/openssl/pull/31961)

test: don't depend on DTLS alert delivery in sslrecords test

2026-07-18T12:53:09Z

The unknown-record-type tests (tests 5 and 6) inferred failure of a DTLS connection from TLSProxy's socket-teardown timing ($proxy_start_success == 0). This relied on the client's fatal alert reaching the peer before the client closes its socket, which is a race: DTLS alerts are best-effort and are never retransmitted (RFC 6347 section 4.2.7 / RFC 9147 section 5.10), and after the s_client shutdown drain was skipped for datagram protocols the alert can be lost during teardown, making the test flaky. Verify instead what is actually under test: that the DTLS client rejected the unrecognised record type, i.e. that s_client exited with a failure. This is a deterministic, local decision that does not depend on the alert being observed by the peer. Keep the alert observation as a best-effort diagnostic note. Capture the s_client exit status in TLSProxy (previously discarded after waitpid) and expose it via a new clientexit accessor. Assisted-by: Claude:claude-opus-4-8 Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz MergeDate: Sat Jul 18 12:53:26 2026 (Merged from https://github.com/openssl/openssl/pull/31927)

Integrate mfail functionality to fuzz tests

2026-07-15T16:01:30Z

Run the fuzz corpora under mfail in addition to the normal path, so the existing inputs also exercise malloc-failure handling. The fuzz.pl harness sizes the mfail runs to a time budget and, on a leak, bisects down to the exact file and injection point. Adds a budgeted asan/ubsan CI job to run it. Assisted-by: Claude:claude-opus-4-6 Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz MergeDate: Wed Jul 15 16:01:43 2026 (Merged from https://github.com/openssl/openssl/pull/30944)

Drop Windows-on-Itanium (VC-WIN64I) support.

2026-07-10T17:39:24Z

Similar to Windows CE, Windows Itanium has not had a toolchain to work on it since VS 2010, and Windows server 2008 was the last thing that ran on it. This does *not* change the other (linux, HPUX) targets which have modern toolchain support, and likely even still run these days. While never letting go seems noble when you won't share the door you're floating on, the time has come. Reviewed-by: Milan Broz Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Fri Jul 10 17:39:39 2026 (Merged from https://github.com/openssl/openssl/pull/31913)

Fix typos

2026-07-08T10:45:09Z

Found by typos[1]. [1] https://github.com/crate-ci/typos CLA: trivial Reviewed-by: Shane Lontis Reviewed-by: Paul Dale Reviewed-by: Tim Hudson Reviewed-by: Norbert Pocs Reviewed-by: Eugene Syromiatnikov MergeDate: Wed Jul 8 10:46:01 2026 (Merged from https://github.com/openssl/openssl/pull/31858)

preserve stack thunks across sk_TYPE_dup

2026-06-25T12:12:29Z

ensure typed stack duplicates keep their compare, copy, and free thunks so later operations do not call typed callbacks through erased void * function pointer signatures. Signed-off-by: Nikola Pajkovsky Reviewed-by: Neil Horman Reviewed-by: Milan Broz MergeDate: Thu Jun 25 12:12:48 2026 (Merged from https://github.com/openssl/openssl/pull/31523)

util: set thunks for sk_${nametype}_new(_reserve)

2026-06-25T12:12:29Z

call OPENSSL_sk_set_thunks for sk_${nametype}_new and sk_${nametype}_new_reserve, and wrap the long generated stack constructor and deep-copy macros across multiple lines so the nested thunk setup is easier to read and maintain. Signed-off-by: Nikola Pajkovsky Reviewed-by: Neil Horman Reviewed-by: Milan Broz MergeDate: Thu Jun 25 12:12:46 2026 (Merged from https://github.com/openssl/openssl/pull/31523)

stack: use a copy thunk for typed stack deep copies

2026-05-20T15:53:32Z

typed safestack wrappers pass type-specific copy callbacks such as TYPE *(*)(const TYPE *) to OPENSSL_sk_deep_copy(). The generic stack code then called those callbacks through OPENSSL_sk_copyfunc, void *(*)(const void *), which is an incompatible function pointer type and triggers UBSan. Add an OPENSSL_sk_copyfunc_thunk and store it on typed stacks, mirroring the existing compare/free thunk pattern. Generated safestack helpers now install a per-type copy thunk when constructing a stack, and internal_copy() uses that thunk when deep-copying typed stacks. This preserves the generic stack API while ensuring typed copy callbacks are invoked through their real signature. Fixes: https://github.com/openssl/project/issues/1951 Signed-off-by: Nikola Pajkovsky Reviewed-by: Eugene Syromiatnikov Reviewed-by: Neil Horman MergeDate: Wed May 20 15:53:45 2026 (Merged from https://github.com/openssl/openssl/pull/31151)

providers/implementation: Generate header includes for .inc files

2026-05-18T07:03:29Z

Make these headers self contained even as they are .inc files. This approach makes it a lot easier to achieve self contained files and protects from include reorders. (where the .inc can get above the dependent headers) Signed-off-by: Norbert Pocs Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky MergeDate: Mon May 18 07:03:48 2026 (Merged from https://github.com/openssl/openssl/pull/31153)