Security and correctness fixes from internal scan#363

Merged

rlm2002 merged 15 commits intowolfSSL:masterfrom

cconlon:scanIssues

May 1, 2026

Commits on Apr 30, 2026

Commits on May 1, 2026

JSSE: log KeyManager/TrustManager class names instead of toString()
cconlon
committed
JSSE: zero plaintext buffers in SendAppData() and on engine cleanup
cconlon
committed
JSSE: replace printStackTrace with debug log in beginHandshake() catch
cconlon
committed
JSSE: drop unnecessary class-wide lock from getTotalOutputSize()
cconlon
committed
JSSE: send shutdown alert when doHandshake() rejects new session
cconlon
committed
JSSE: drop unnecessary class-wide locks from getAllCiphers/getAllProtocols
cconlon
committed
JSSE: fix initSecureRandom() overwriting default with null
cconlon
committed
JSSE: distinguish 'no cache key' from hashCode==0 in addSession()
cconlon
committed
JSSE: invalidate sessions with future-dated creation time
cconlon
committed
JSSE: use ConcurrentHashMap for thread-safe SSLSession bindings; reject null in putValue()
cconlon
committed
JSSE: return unmodifiable list from all getRequestedServerNames() paths
cconlon
committed
JSSE: throw SSLPeerUnverifiedException from getPeerCertificateChain() error path
cconlon
committed
JSSE: replace printStackTrace with debug log in getId()
cconlon
committed