Commander1024/ESP32_Serial_Swiss_Army_Knife
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
124 Commits 7 Branches 0 Tags
797d2681acb81e7580c1ea94d1259762e0af4075
Commit Graph
4 Commits
Author SHA1 Message Date
Commander1024 51f835c22f Harden SSH parsing and add notice tooling 
- Enforce exact service and channel names with bounded failure parsing
- Add hash-pinned offline notice assembly and regression coverage
- Record advisory dispositions, provenance, integration evidence, and
  remaining gates
 2026-09-16 15:06:38 +02:00
Commander1024 bea33e1c95 Add restricted wolfSSH ordering fix 
Apply hash-pinned generated edits for CVE-2025-14942 while keeping
wolfSSH 1.4.20 managed sources unchanged. Add the ABI header overlay,
provenance records, and real state-machine interoperability contracts.
 2026-09-16 14:04:34 +02:00
Commander1024 4d3bb490c9 Harden wolfSSL and wolfSSH validation 
Enable validated ECC imports and X25519 all-zero rejection through
PUBLIC build policy. Tighten wolfSSH parser bounds, overflow handling,
and signature framing with guard-page and crypto vector contracts.
 2026-09-15 23:54:39 +02:00
Commander1024 c010e1a1d5 Apply Phase 9D security mitigations 
- Add fail-closed wolfSSL small-math policy and vectors
- Backport DHCP, EMS, and X.509 allocation fixes
- Extend source override validation and operational documentation
 2026-09-15 23:06:23 +02:00