wolfssl: patch CVE-2026-55958

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55958

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi authored and Anuj Mittal committed 2026-09-15 10:13:38 +05:30
1 parent 64f5842834
commit 7b5f42ff26
2 files changed
+37

No files matched your search

@@ -0,0 +1,36 @@
From ea7c289d463c506fe3eb856c5d128b7d0e1799b7 Mon Sep 17 00:00:00 2001
From: Chris Conlon <chris@wolfssl.com>
Date: Tue, 16 Jun 2026 13:58:52 -0600
Subject: [PATCH] Renesas TSIP: skip XMEMCPY on MEMORY_E from
tsip_StoreMessage()
(cherry picked from commit 6ebc379f313769ac49a84be0221c626162ffcfab)
CVE: CVE-2026-55958
Upstream-Status: Backport [https://github.com/wolfSSL/wolfssl/commit/6ebc379f313769ac49a84be0221c626162ffcfab]
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
wolfcrypt/src/port/Renesas/renesas_tsip_sha.c | 9 +++++----
1 file changed, 5 insertions(+), 4 deletions(-)
diff --git a/wolfcrypt/src/port/Renesas/renesas_tsip_sha.c b/wolfcrypt/src/port/Renesas/renesas_tsip_sha.c
index 0d5957744..d04072397 100644
--- a/wolfcrypt/src/port/Renesas/renesas_tsip_sha.c
+++ b/wolfcrypt/src/port/Renesas/renesas_tsip_sha.c
@@ -203,10 +203,11 @@ WOLFSSL_LOCAL int tsip_StoreMessage(struct WOLFSSL* ssl, const byte* data,
WOLFSSL_MSG("Capacity over error in tsip_StoreMessage");
ret = MEMORY_E;
}
-
- XMEMCPY(bag->buff + bag->buffIdx, data, sz);
- bag->msgTypes[bag->msgIdx++] = *data; /* store message type */
- bag->buffIdx += sz;
+ else {
+ XMEMCPY(bag->buff + bag->buffIdx, data, sz);
+ bag->msgTypes[bag->msgIdx++] = *data; /* store message type */
+ bag->buffIdx += sz;
+ }
}
WOLFSSL_LEAVE("tsip_StoreMessage", ret);
@@ -18,6 +18,7 @@ SRC_URI = " \
file://CVE-2026-10098-1.patch \
file://CVE-2026-10098-2.patch \
file://CVE-2026-10512.patch \
file://CVE-2026-55958.patch \
"
SRCREV = "1d363f3adceba9d1478230ede476a37b0dcdef24"