Add UDP support to NetX sockets for DTLS sessions by hmohide · Pull Request #10408 · wolfSSL/wolfssl

hmohide · 2026-05-06T14:42:42Z

Description

Add UDP support to NetX sockets for DTLS sessions

Fixes zd#

src/internal.c
src/wolfio.c
wolfssl/internal.h
wolfssl/wolfio.h

Testing

Yes, verified the DTLS communication with multiple session

Checklist

added tests
updated/added doxygen
updated appropriate READMEs
Updated manual and documentation

wolfSSL-Bot · 2026-05-06T14:45:09Z

Can one of the admins verify this patch?

dgarske · 2026-05-06T14:49:59Z

Okay to test. Contributor agreement on file. Thank you @hmohide

night1rider · 2026-05-06T19:00:15Z

#10414 Should fix the zephyr tests if you rebase to pull in the updated workflow

github-actions · 2026-05-06T23:10:06Z

hmohide · 2026-05-07T14:09:58Z

@dgarskeI think above failure not triggered by the changes? Do i need to make some change? Please guide

dgarske · 2026-05-07T17:02:01Z

Hi @hmohide these would all be solved by a rebase against latest master and force push. Please go ahead and do that. Thanks

dgarske

Skoll Code Review

Scan type: reviewOverall recommendation: REQUEST_CHANGES
Findings: 9 total — 9 posted, 0 skipped
7 finding(s) posted as inline comments (see file-level comments below)

Posted findings

[High] DTLS NetX receive maps timeouts to fatal error, breaking retransmission — src/wolfio.c:2659-2665
[Medium] wolfSSL_SetIO_NetX_Dtls stores caller pointers dereferenced much later (lifetime hazard) — src/wolfio.c:2751-2759, wolfssl/internal.h:5719-5721
[Medium] DTLS receive does not capture peer address (single fixed-peer limitation) — src/wolfio.c:2644-2694
[Medium] New public API and DTLS IO callbacks have no test coverage — src/wolfio.c:2644-2759
[Medium] New public API lacks doxygen; existing doxygen references renamed nxSocket field — wolfssl/wolfio.h:798-801
[Medium] DTLS NetX path requires NetX Duo APIs without a guard — src/wolfio.c:2729-2745
[Low] NetX_SendTo uses Allman braces and missing space after 'if' (style mismatch) — src/wolfio.c:2729-2745
[Low] Trailing whitespace will fail wolfSSL whitespace CI check — src/wolfio.c:2640,2708,2736,2744,2754; wolfssl/internal.h:5718; wolfssl/wolfio.h:795,798-801
[Low] Incorrect/misleading struct member comments (nxPort, nxUdpSocket) — wolfssl/internal.h:5719-5721

Review generated by Skoll

dgarske

@hmohide Our internal AI review found several items to consider: #10408 (review)

hmohide · 2026-06-12T09:18:51Z

@dgarske i have updated the review comments

- Replace non-ASCII em-dash with ASCII hyphen in NetX_ReceiveFrom comment to pass wolfSSL encoding/whitespace CI check - Add WOLFSSL_NETX_DUO to .wolfssl_known_macro_extras so the macro checker no longer flags it as unrecognized

dgarske · 2026-06-15T15:50:25Z

Jenkins retest this please "Build 'wolfSSL/PRB-fips-repo-and-harness-test-v3-part2' failed with result: FAILURE"

Copilot

Pull request overview

This PR adds NetX Duo UDP I/O callback support so DTLS sessions can run over NetX sockets (in addition to existing NetX TCP/TLS support), and wires the appropriate callbacks/context initialization into the default wolfSSL initialization paths.

Changes:

Add NetX Duo DTLS UDP I/O callbacks (NetX_ReceiveFrom / NetX_SendTo) and a public configuration API (wolfSSL_SetIO_NetX_Dtls).
Update NetX context structure to track separate TCP vs UDP socket handles and UDP destination addressing.
Select UDP callbacks automatically for DTLS methods in InitSSL_Ctx() and ensure DTLS I/O contexts point at ssl->nxCtx when NetX is enabled.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
`wolfssl/wolfio.h`	Adds public API and local callback prototypes for NetX Duo DTLS UDP I/O.
`wolfssl/internal.h`	Extends NetX I/O context to distinguish TCP vs UDP and store DTLS destination addressing.
`src/wolfio.c`	Implements NetX Duo DTLS UDP send/receive callbacks and updates existing NetX TCP callbacks to use renamed context fields.
`src/internal.c`	Selects NetX DTLS UDP callbacks for DTLS contexts and fixes DTLS default I/O ctx initialization for NetX.
`doc/dox_comments/header_files/wolfio.h`	Updates NetX docs and adds Doxygen for the new DTLS NetX Duo UDP API.
`doc/dox_comments/header_files-ja/wolfio.h`	Japanese doc updates/additions corresponding to the NetX changes.
`.wolfssl_known_macro_extras`	Registers `WOLFSSL_NETX_DUO` as a known macro.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

dgarske

Skoll Code Review

Scan type: reviewOverall recommendation: COMMENT
Findings: 5 total — 4 posted, 1 skipped
4 finding(s) posted as inline comments (see file-level comments below)

Posted findings

[Medium] NetX_ReceiveFrom does not validate the datagram source peer — src/wolfio.c:2645-2718
[Medium] DTLS 1.3 quick-timeout can divide to zero and fall back to nxWait, disabling retransmission — src/wolfio.c:2662-2675
[Low] Zero-length datagram returns 0 instead of being ignored — src/wolfio.c:2692-2717
[Low] Redundant repeated wolfSSL_dtls_get_using_nonblock() calls — src/wolfio.c:2662-2685

Skipped findings

[Medium] ~~No test coverage for new NetX DTLS UDP callbacks~~

Review generated by Skoll

dgarske · 2026-06-16T16:26:43Z

Ah the "Build 'wolfSSL/PRB-fips-repo-and-harness-test-v3-part2' failed with result: FAILURE" test won't pass since you opened this PR on your fork's master branch. That's a known issue with our CI. I won't make you re-open the PR.

dgarske

Skoll Code Review

Scan type: reviewOverall recommendation: COMMENT
Findings: 5 total — 4 posted, 1 skipped
4 finding(s) posted as inline comments (see file-level comments below)

Posted findings

[Medium] Invalid-peer / 0-length datagram receive loop has no bound and re-arms full wait each iteration — src/wolfio.c:2700-2790
[Medium] Strict pre-set peer filtering prevents DTLS server use (peer unknown until first ClientHello) — src/wolfio.c:2746-2751
[Low] Infinite-loop callback has no trailing return; may warn 'control reaches end of non-void function' — src/wolfio.c:2790-2793
[Info] Two stray blank lines added in generated doxygen header — doc/dox_comments/header_files/wolfio.h:517-518

Skipped findings

[Low] ~~New NetX Duo DTLS callbacks have no test coverage~~

Review generated by Skoll

dgarske · 2026-06-18T16:23:45Z

Jenkins retest this please "Build 'wolfSSL/PRB-fips-repo-and-harness-test-v3-part2' failed with result: FAILURE"

dgarske

Skoll Code Review

Scan type: reviewOverall recommendation: COMMENT
Findings: 5 total — 4 posted, 1 skipped
4 finding(s) posted as inline comments (see file-level comments below)

Posted findings

[Medium] NetX_ReceiveFrom does not track cumulative elapsed time across loop iterations — src/wolfio.c:2706-2774
[Low] DTLS+NetX IOCB ctx switch means wolfSSL_dtls_set_peer() no longer affects NetX I/O — src/internal.c:7916-7922
[Low] Unreachable return after infinite do-while loop — src/wolfio.c:2821-2823
[Low] New code uses if (ssl) instead of if (ssl != NULL) — src/wolfio.c:2877-2887

Skipped findings

[Low] ~~No test coverage for new NetX DTLS/UDP callbacks~~

Review generated by Skoll

dgarske

#10408 (review)

hmohide · 2026-06-18T17:01:13Z

@dgarske Earlier i saw this PR was approved by you. but i still getting the AI agent review comments. do i need to fix?

dgarske · 2026-06-18T17:20:59Z

@dgarske Earlier i saw this PR was approved by you. but i still getting the AI agent review comments. do i need to fix?

Yes take a look at them. I ran our internal code scanner tool and it found those. Note you are welcome to push back on the findings if you don't think they are needed.

dgarske · 2026-06-18T17:21:56Z

@dgarske Earlier i saw this PR was approved by you. but i still getting the AI agent review comments. do i need to fix?

Yes take a look at them. I ran our internal code scanner tool and it found those. Note you are welcome to push back on the findings if you don't think they are needed.

Oh also please make sure you rebase to latest master. We made some CI optimization updates that you need to pull in. Thanks!

- Replace non-ASCII em-dash with ASCII hyphen in NetX_ReceiveFrom comment to pass wolfSSL encoding/whitespace CI check - Add WOLFSSL_NETX_DUO to .wolfssl_known_macro_extras so the macro checker no longer flags it as unrecognized

hmohide · 2026-06-22T06:19:48Z

@dgarske Earlier i saw this PR was approved by you. but i still getting the AI agent review comments. do i need to fix?

Yes take a look at them. I ran our internal code scanner tool and it found those. Note you are welcome to push back on the findings if you don't think they are needed.

Oh also please make sure you rebase to latest master. We made some CI optimization updates that you need to pull in. Thanks!

i have rebased the branch

hmohide · 2026-06-23T14:21:29Z

@dgarske i have rebased. can you please review and approve

dgarske · 2026-06-23T14:56:36Z

Jenkins retest this please. History lost

dgarske · 2026-06-23T22:12:17Z

The CI "Build 'wolfSSL/PRB-fips-repo-and-harness-test-v3-part2' failed with result: FAILURE" is failing only because you have this PR opened on master. We can accept with that known CI issue. We are in a release cycle, so this won't be merged for a few days.

Add UDP support to NetX sockets for DTLS sessions

5db48e5

hmohide mentioned this pull request May 6, 2026

Add UDP support to NetX sockets for DTLS sessions #10273

Closed

4 tasks

dgarske assigned wolfSSL-Bot May 6, 2026

dgarske assigned hmohide May 7, 2026

Added the guard with WOLFSSL_DTLS

38d62bb

dgarske unassigned hmohide Jun 10, 2026

dgarske self-requested a review June 10, 2026 16:42

dgarske approved these changes Jun 10, 2026

View reviewed changes

dgarske reviewed Jun 10, 2026

View reviewed changes

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c

Comment thread src/wolfio.c

Comment thread wolfssl/wolfio.h Outdated

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c Outdated

Comment thread wolfssl/internal.h

dgarske requested changes Jun 10, 2026

View reviewed changes

dgarske assigned hmohide Jun 10, 2026

updated the review comments

730cdcc

dgarske requested changes Jun 12, 2026

View reviewed changes

Comment thread src/wolfio.c Outdated

Comment thread wolfssl/internal.h

wolfio: fix review comments for DTLS NetX UDP support

e59b7cd

- Replace non-ASCII em-dash with ASCII hyphen in NetX_ReceiveFrom comment to pass wolfSSL encoding/whitespace CI check - Add WOLFSSL_NETX_DUO to .wolfssl_known_macro_extras so the macro checker no longer flags it as unrecognized

dgarske self-requested a review June 15, 2026 15:54

dgarske unassigned hmohide Jun 15, 2026

dgarske requested a review from Copilot June 15, 2026 18:38

Copilot started reviewing on behalf of dgarske June 15, 2026 18:39 View session

Copilot AI reviewed Jun 15, 2026

View reviewed changes

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c Outdated

Comment thread doc/dox_comments/header_files/wolfio.h

Comment thread doc/dox_comments/header_files-ja/wolfio.h Outdated

dgarske reviewed Jun 15, 2026

View reviewed changes

Comment thread src/wolfio.c

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c Outdated

dgarske assigned hmohide Jun 15, 2026

updated review comments

542f30c

dgarske self-requested a review June 16, 2026 16:25

dgarske unassigned hmohide Jun 16, 2026

dgarske reviewed Jun 16, 2026

View reviewed changes

Comment thread src/wolfio.c

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c

Comment thread doc/dox_comments/header_files/wolfio.h

dgarske assigned hmohide Jun 16, 2026

Updated the review comments

0ca15af

hmohide requested a review from dgarske June 18, 2026 14:54

dgarske reviewed Jun 18, 2026

View reviewed changes

Comment thread src/wolfio.c

Comment thread src/internal.c

Comment thread src/wolfio.c

Comment thread src/wolfio.c

dgarske requested changes Jun 18, 2026

View reviewed changes

hmohide added 7 commits June 22, 2026 11:47

Add UDP support to NetX sockets for DTLS sessions

64ce37e

Added the guard with WOLFSSL_DTLS

d7e5b90

updated the review comments

50e13f8

wolfio: fix review comments for DTLS NetX UDP support

f0f7ea6

- Replace non-ASCII em-dash with ASCII hyphen in NetX_ReceiveFrom comment to pass wolfSSL encoding/whitespace CI check - Add WOLFSSL_NETX_DUO to .wolfssl_known_macro_extras so the macro checker no longer flags it as unrecognized

updated review comments

918ed46

Updated the review comments

d6d55a6

Merge branch 'master' of https://github.com/hmohide/dtls-netx-udp

cf3e878

Merge branch 'wolfSSL:master' into master

53be3fb

dgarske self-requested a review June 23, 2026 14:56

dgarske assigned dgarske and unassigned hmohide Jun 23, 2026

Uh oh!

Conversation

hmohide commented May 6, 2026

Description

Testing

Checklist

Uh oh!

wolfSSL-Bot commented May 6, 2026

Uh oh!

dgarske commented May 6, 2026

Uh oh!

night1rider commented May 6, 2026

Uh oh!

github-actions Bot commented May 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

MemBrowse Memory Report

Uh oh!

hmohide commented May 7, 2026

Uh oh!

dgarske commented May 7, 2026

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Skoll Code Review

Posted findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Uh oh!

hmohide commented Jun 12, 2026

Uh oh!

Uh oh!

Uh oh!

dgarske commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Skoll Code Review

Posted findings

Skipped findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

dgarske commented Jun 16, 2026

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Skoll Code Review

Posted findings

Skipped findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

dgarske commented Jun 18, 2026

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Skoll Code Review

Posted findings

github-actions Bot commented May 6, 2026 •

edited

Loading

dgarske commented Jun 15, 2026 •

edited

Loading