| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-09-29 | Fixed _nx_websocket_client_connect_internal declaration. | Frédéric Desbiens | |
| 2025-09-29 | Fixed typo in updated _nx_websocket_client_connect declaration. | Frédéric Desbiens | |
| 2025-09-29 | Fixed _nxe_websocket_client_connect declaration. | Frédéric Desbiens | |
| 2025-09-29 | Fixed _nxe_websocket_client_connect declaration. | Frédéric Desbiens | |
| 2025-09-29 | Updated version number and added build number and hotfix. | Frédéric Desbiens | |
| 2025-09-29 | Merge pull request #317 from sjscymru/fix-hdfk-buffer-overflow | Frédéric Desbiens | |
| Fix HKDF implementation to prevent buffer overrun when compiled with NX_SECURE_KEY_CLEAR | |||
| 2025-09-29 | Merge pull request #313 from mdkf/dev | Frédéric Desbiens | |
| #312 Handle HTTP code 429 | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Insert a buffer_ptr position check before getting bytes | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Insert a index position check before getting bytes | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Added buffer length check | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Insert a remaining buffer length check before dereferencing the pointer | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Fixed issue in _nx_secure_tls_process_clienthello() | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Fix length checking in supported version extension, add test | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Fix PSK extension length checking, add tests for such | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Fix multiple NextX Duo vulnerabilities. | |||
| 2025-09-29 | Merge commit from fork | Frédéric Desbiens | |
| Fixes an issue in nx_secure_tls_psk_identity_find() | |||
| 2025-09-02 | Merge pull request #326 from igortomiatti/implement-ecdhe-psk | Frédéric Desbiens | |
| Implementation of ECDHE_PSK cipher suites | |||
| 2025-09-02 | Merge pull request #330 from joelguittet/websocket-improvement-headers | Frédéric Desbiens | |
| Websocket improvement headers. | |||
| 2025-07-28 | Address the following advisories: | Yuxin Zhou | |
| https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-pf5q-r6q5-6j2f https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-cf2g-j6vv-m8c5 https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-vwh7-h99r-fvwq https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-c9pq-93jp-w649 | |||
| 2025-07-28 | Ensure proper RAM Disk sizing in the HTTPS demo. | Frédéric Desbiens | |
| 2025-07-21 | Added error handling to the HTTPS sample. | Frédéric Desbiens | |
| Signed-off-by: Frédéric Desbiens <[email protected]> | |||
| 2025-06-19 | websocket client: Add support for Authorization Bearer header | Joel Guittet | |
| The Authorization: Bearer header allow to perform authentication providing a token. It is optional. Signed-off-by: Joel Guittet <[email protected]> | |||
| 2025-06-19 | websocket client: Sec-WebSocket-Protocol is optional header | Joel Guittet | |
| The header Sec-WebSocket-Protocol is optional in both the request and the response from the server. Signed-off-by: Joel Guittet <[email protected]> | |||
| 2025-06-12 | Added the cipher suites: TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA and ↵ | Igor Tomiatti | |
| TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA | |||
| 2025-06-12 | Generate pre master secret according to ECDHE_PSK | Igor Tomiatti | |
| 2025-06-12 | Generate client key exchange according to ECDHE_PSK | Igor Tomiatti | |
| 2025-06-12 | Support for ECDHE_PSK in process server key exchange | Igor Tomiatti | |
| 2025-05-27 | patch for GHSA-v474-mv4g-v8cx | cypherbridge | |
| edited by inspection not compiled or run-time tested | |||
| 2025-05-27 | patch for GHSA-8h38-qjhh-mf2h | cypherbridge | |
| edited by inspection not compiled or run-time tested | |||
| 2025-05-27 | patch for GHSA-5vrv-8j5h-h6h6 | cypherbridge | |
| edited by inspection not compiled or run-time tested | |||
| 2025-05-22 | Add length check for supported versions extension and regression test | Huan Nguyen | |
| 2025-05-22 | Move empty packet check in nx_secure_tls_session_send | Huan Nguyen | |
| It was causing some tests to hang forever because they were expecting different errors to be returned. We do want to keep the check for empty packets as the netx_web_invalid_release_test expects that sending an empty packet fails. Note that the test also tests HTTPS, which will technically send a non-empty packet because the empty packet will be modified to include the TLS data. However, the empty packet check in nx_secure_tls_session_send will fulfill the same role as the check in nx_tcp_socket_send.c, checking for an empty packet prior to the modification of the packet to include TLS data. This gets the tests passing again. | |||
| 2025-05-22 | Fix broken bounds check and add regression test | Huan Nguyen | |
| The check is in the function _nx_secure_tls_process_clienthello_psk_extension and was reported as a vulnerability. | |||
| 2025-05-22 | Move empty packet check in nx_secure_tls_session_send | Huan Nguyen | |
| It was causing some tests to hang forever because they were expecting different errors to be returned. We do want to keep the check for empty packets as the netx_web_invalid_release_test expects that sending an empty packet fails. Note that the test also tests HTTPS, which will technically send a non-empty packet because the empty packet will be modified to include the TLS data. However, the empty packet check in nx_secure_tls_session_send will fulfill the same role as the check in nx_tcp_socket_send.c, checking for an empty packet prior to the modification of the packet to include TLS data. This gets the tests passing again. | |||
| 2025-05-20 | Insert a buffer_ptr position check before getting bytes | ekleezg | |
| 2025-05-20 | Insert a index position check before getting bytes | ekleezg | |
| 2025-05-20 | Insert a remaining buffer length check before dereferencing the pointer | ekleezg | |
| 2025-05-16 | Merge pull request #319 from eclipse-threadx/dev | Frédéric Desbiens | |
| Fixes to build script and submodule definitions | |||
| 2025-05-16 | Merge pull request #318 from hnguyenHWI/master | Frédéric Desbiens | |
| Fix the FileX and ThreadX dependencies | |||
| 2025-05-15 | Fix URL for submodules to work for everyone | Huan Nguyen | |
| 2025-05-15 | Add newlines at EOF to comply with POSIX standard | Huan Nguyen | |
| 2025-05-15 | Update FileX submodule | Huan Nguyen | |
| Need to update to include the CMake version changes so that the NetXDuo build scripts succeed. | |||
| 2025-05-15 | Try to help user if build script fails | Huan Nguyen | |
| A common error condition is that the user cloned the repo without the --recursive option. We'll try to get the submodules for them. We remove the git clone command because the submodule update should fix the issue. | |||
| 2025-05-15 | fix: corrected cleanup method call in HKDF implementation to prevent ↵ | Simon Scurrell | |
| potential buffer overflow due to incorrect pointer being passed to HMAC cleanup if NetX is build with NX_SECURE_KEY_CLEAR defined. | |||
| 2025-05-14 | Add FileX and ThreadX as proper submodules | Huan Nguyen | |
| 2025-05-14 | Remove submodules improperly added via clone | Huan Nguyen | |
| 2025-04-17 | Update tests | Michael Fowler | |
| 2025-04-07 | typo | Michael Fowler | |
| 2025-04-02 | 312 Handle HTTP code 429 | Michael DK Fowler | |
| 2025-03-18 | Merge pull request #308 from eclipse-threadx/devv6.4.3_rel | Frédéric Desbiens | |
| Release version v.6.4.3 | |||
