Commander1024/ESP32_Serial_Swiss_Army_Knife
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
121 Commits 7 Branches 0 Tags
bea33e1c955d8eb18a520913a485d8ae180f0e04
Commit Graph
6 Commits
Author SHA1 Message Date
Commander1024 bea33e1c95 Add restricted wolfSSH ordering fix 
Apply hash-pinned generated edits for CVE-2025-14942 while keeping
wolfSSH 1.4.20 managed sources unchanged. Add the ABI header overlay,
provenance records, and real state-machine interoperability contracts.
 2026-09-16 14:04:34 +02:00
Commander1024 4d3bb490c9 Harden wolfSSL and wolfSSH validation 
Enable validated ECC imports and X25519 all-zero rejection through
PUBLIC build policy. Tighten wolfSSH parser bounds, overflow handling,
and signature framing with guard-page and crypto vector contracts.
 2026-09-15 23:54:39 +02:00
Commander1024 c010e1a1d5 Apply Phase 9D security mitigations 
- Add fail-closed wolfSSL small-math policy and vectors
- Backport DHCP, EMS, and X.509 allocation fixes
- Extend source override validation and operational documentation
 2026-09-15 23:06:23 +02:00
Commander1024 cdc9c7335a Add Phase 9C security hardening 
Generate exact-hash SDK source overrides without modifying dependencies.
Harden
SSH allocation and algorithm policy, tighten web authentication cleanup,
and add
focused host contract tests and documentation.
 2026-09-15 22:12:57 +02:00
Commander1024 751dfb9ddb Harden SSH Admission And Credential Input 2026-09-15 20:49:04 +02:00
Commander1024 436c27adb1 Enforce crash-safe build policy 
Add compile-time checks for silent reboot, disabled core dumps, and
disabled debugger-aware panic handling. Include regression coverage,
hardening guidance, and update Phase 8/9 project status.
 2026-09-15 20:11:40 +02:00