Fenrir fixes 2026-06-04#127

Merged

gasbytes merged 24 commits into

wolfSSL:masterfrom

danielinux:fixes-20260604

Jun 5, 2026

Commits on Jun 4, 2026

F-5009: reject path traversal and absolute paths in TFTP RRQ/WRQ filenames
danielinux
committed
F-5481: put the ACK-triggering segment in the first SACK block
danielinux
committed
F-4946: guard DNS lookups against clobbering in-flight query state
danielinux
committed
F-5070: enforce raw socket bound_local_ip and if_idx on receive
danielinux
committed
F-5696: deregister httpd callback on the lingering socket in fail_close
danielinux
committed
F-4501: drop filter-blocked packet-socket TX frames instead of resending
danielinux
committed
F-5011: deliver 802.1Q-tagged frames to parent-bound AF_PACKET sockets
danielinux
committed
F-5697: never forward a packet whose source is one of our own IPs
danielinux
committed
F-5784: strip IP options before ESP unwrap so IHL>5 ESP packets are handled
danielinux
committed
F-5484: document that raw sockets intentionally tap before source-route policy
danielinux
committed
F-4948: purge ARP state for a VLAN slot on delete to stop cross-VLAN L2 trust
danielinux
committed
F-5698: re-randomize the DHCP xid for each renewal cycle
danielinux
committed
F-5482: reject a DHCPACK that lacks the mandatory lease-time option
danielinux
committed
F-5485: null-check the public DHCP helper APIs
danielinux
committed
F-5733: validate ECHO_REPLY destination IP before delivering to ICMP sockets
danielinux
committed
F-5069: defer UDP/ICMP bind src_port commit until the filter approves
danielinux
committed
F-5495: reject a NULL receive buffer in wolfIP_sock_recvfrom
danielinux
committed
F-5479: validate TCP connect local binding before mutating socket state
danielinux
committed
F-5904: validate IGMP query TTL and destination in igmp_input
danielinux
committed
F-5490: make iphdr_set_checksum clear the csum field before computing
danielinux
committed
F-4949: coalesce overlapping OOO segments instead of consuming a slot each
danielinux
committed
F-5488: reject overlong TCP Timestamp options instead of accepting them
danielinux
committed
tftp: reject Windows drive specifiers and NTFS ADS in filename safety check
danielinux
committed
ci: tolerate gcov -block lines in autocov so gcovr 7.0 does not abort
danielinux
committed