[openssl/openssl] 7d4475: statem: fail handshake if there is memory failure...

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 7d4475bdf251bae7ed504e96230dcf12d7329f6d
      https://github.com/openssl/openssl/commit/7d4475bdf251bae7ed504e96230dcf12d7329f6d
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-06-30 (Tue, 30 Jun 2026)

  Changed paths:
    M ssl/statem/extensions_clnt.c

  Log Message:
  -----------
  statem: fail handshake if there is  memory failure in negotiate_dhe

Previously this just resulted in the skip of the group but such failure
should result in a proper error. This is not a big issue but it impacts
mfail tests so it would be good to fail.

Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Daniel Kubec <[email protected]>
MergeDate: Tue Jun 30 08:54:47 2026
(Merged from https://github.com/openssl/openssl/pull/31618)


  Commit: c36a9b463e765001c2d558bb73f06b0bf8612158
      https://github.com/openssl/openssl/commit/c36a9b463e765001c2d558bb73f06b0bf8612158
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-06-30 (Tue, 30 Jun 2026)

  Changed paths:
    M test/build.info
    A test/recipes/25-test_statem_clnt.t
    A test/statem_clnt_construct_test.c

  Log Message:
  -----------
  statem: add direct tests for tls_construct_client_hello

Add a new test which calls tls_construct_client_hello() directly,
creating an SSL_CONNECTION enough to invoke the construct function
without making a full handshake, then verifies the produced
ClientHello structurally and by round-tripping it through the
server-side tls_process_client_hello().

The covered branches include TLS 1.3 (with and without middlebox
compat), TLS 1.2, DTLS, session resumption, HelloRetryRequest, the DTLS
cookie and client_random reuse paths, the deterministic error branches
(WPACKET overflow and no usable ciphers), and the ECH wrapper path
(happy path with server-side decryption, the TLS 1.2 version error, and
OOM). Out-of-memory branches are exercised with the mfail tests.

Assisted-by: Claude:claude-opus-4-8

Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Daniel Kubec <[email protected]>
MergeDate: Tue Jun 30 08:54:48 2026
(Merged from https://github.com/openssl/openssl/pull/31618)


Compare: https://github.com/openssl/openssl/compare/f5a5e8904417...c36a9b463e76

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/f5a5e8-c36a9b%40github.com.