Skip to content

Harden the notification log server example - #98

Open
aidangarske wants to merge 10 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-5002-5778-5008
Open

aidangarske wants to merge 10 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-5002-5778-5008

Conversation

@aidangarske

Copy link
Copy Markdown
Member

F-5002 - ca0b963 - The log server example now rejects the handshake when issuer name rendering returns NULL.

F-5779 - ea0a82c - The log server verify callback now frees its X509 name strings on every return path.

F-5712 - 4a36715 - The log server now strips control bytes from peer certificate strings before logging them.

F-5778 - 979181e - The circular log now evicts the entry at offset zero when it wraps.

F-4704 - c1f68eb - Shutdown in the log server now skips route dispatch when no rule route was checked out.

F-4821 - aae0a26 - The log server now rejects circlog-size values that overflow size_t before allocating.

F-5073 - 298fb3f - The log server no longer truncates the config file size returned by ftell.

F-5008 - 6826116 - The log server now checks buffer space before writing the decision list separator.

F-4763 - 5a18bcb - Event and address family labels written into the circular log JSON are now escaped.

…ings on every verify callback return path
…s from peer certificate strings before logging
… offset zero when the circular log wraps
…h at shutdown when no rule route was checked out
…e values that overflow size_t before allocating
… before writing the decision list separator
…ddress-family labels written into the circular log JSON

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #98

Scan targets checked: wolfsentry-pr-general
Review type: general (no scan target covers the changed files)
Coverage: 2 of 2 in-scope changed file(s) opened by the reviewer

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Reported findings require changes before merge.

Review tier: Lite

…label written into the circular log JSON

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #98

Scan targets checked: wolfsentry-pr-general
Review type: general (no scan target covers the changed files)
Coverage: 1 of 1 in-scope changed file(s) opened by the reviewer

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Lite

@wolfSSL-Fenrir-bot
wolfSSL-Fenrir-bot dismissed their stale review October 24, 2026 01:29

Fenrir's latest completed scan found no issues; clearing the prior automated change request.

@aidangarske
aidangarske marked this pull request as ready for review October 24, 2026 01:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants