openwrt/package/libs/wolfssl/patches/100-disable-hardening-check.patch
Nick Hainke b03c79f382 wolfssl: update to 5.8.4
Release Notes:
https://www.wolfssl.com/wolfssl-5-8-4-now-available/

Fixes CVEs:
- CVE-2025-12889
- CVE-2025-12888
- CVE-2025-11936
- CVE-2025-11935
- CVE-2025-11934
- CVE-2025-11933
- CVE-2025-11932
- CVE-2025-11931

Link: https://github.com/openwrt/openwrt/pull/20922
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-26 09:35:04 +01:00

11 lines
545 B
Diff

--- a/wolfssl/wolfcrypt/settings.h
+++ b/wolfssl/wolfcrypt/settings.h
@@ -4048,7 +4048,7 @@ extern void uITRON4_free(void *p) ;
/* warning for not using harden build options (default with ./configure) */
/* do not warn if big integer support is disabled */
-#if !defined(WC_NO_HARDEN) && !defined(NO_BIG_INT)
+#if 0
#if (defined(USE_FAST_MATH) && !defined(TFM_TIMING_RESISTANT)) || \
(defined(HAVE_ECC) && !defined(ECC_TIMING_RESISTANT)) || \
(!defined(NO_RSA) && !defined(WC_RSA_BLINDING) && !defined(HAVE_FIPS) && \