curl-curl/lib/vtls
Daniel Stenberg 59c8de7897
mbedtls: fix ECJPAKE matching
It did not require a full-length match, so empty or prefix tokens map to
ECJPAKE would silently add that cipher to the configured list.

Follow-up to fba9afebba

Reported by Codex Security

Closes #21264
2026-04-08 11:27:31 +02:00
..
apple.c badwords: rework exceptions, fix many of them 2026-03-12 01:01:16 +01:00
apple.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
cipher_suite.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
cipher_suite.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
gtls.c gtls: fail for large files in load_file() 2026-04-07 20:04:44 +02:00
gtls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
hostcheck.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
hostcheck.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
keylog.c tidy-up: rename Curl_safefree()/tool_safefree() to curlx_safefree() 2026-04-01 19:53:53 +02:00
keylog.h keylog.h: replace literal number with macro in declaration 2026-03-28 15:51:04 +01:00
mbedtls.c mbedtls: fix ECJPAKE matching 2026-04-08 11:27:31 +02:00
mbedtls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
openssl.c tidy-up: rename Curl_safefree()/tool_safefree() to curlx_safefree() 2026-04-01 19:53:53 +02:00
openssl.h boringssl: fix more coexist cases with Schannel/WinCrypt 2026-03-28 15:52:41 +01:00
rustls.c lib: reserve 'result' for CURLcode 2026-04-06 23:12:06 +02:00
rustls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel_int.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel_verify.c lib: reserve 'result' for CURLcode, even more 2026-04-07 07:48:58 +02:00
schannel.c spelling: fix typos 2026-04-01 22:50:12 +02:00
schannel.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls_int.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls_scache.c tidy-up: rename Curl_safefree()/tool_safefree() to curlx_safefree() 2026-04-01 19:53:53 +02:00
vtls_scache.h badwords: rework exceptions, fix many of them 2026-03-12 01:01:16 +01:00
vtls_spack.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls_spack.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls.c lib: reserve 'result' for CURLcode, even more 2026-04-07 07:48:58 +02:00
vtls.h urldata: import port types and conn destination format 2026-03-15 12:02:26 +01:00
wolfssl.c lib: make resolving HTTPS DNS records reliable: 2026-04-01 15:36:31 +02:00
wolfssl.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
x509asn1.c clang-tidy: avoid assigments in if expressions 2026-04-07 16:57:46 +02:00
x509asn1.h x509asn1: fixed and adapted for ASN1tostr unit testing 2026-03-20 13:03:40 +01:00