Fenrir fixes 2026 08 19 - #155

Merged

gasbytes merged 16 commits into

wolfSSL:masterfrom

danielinux:fenrir-fixes-2026-08-19

Aug 20, 2026

Commits on Aug 19, 2026

F-10278: pop one root entry from the timer heap
danielinux
committed
ebb0640
fix: ignore stale timer fires in the DHCP BOUND state
danielinux
committed
eb4cd40
F-10267: send TTL-exceeded for short datagrams, quoting what exists
danielinux
committed
a453206
F-10270: copy the triggering TOS into generated ICMP errors
danielinux
committed
83bc685
F-10256: send ICMP errors from VLAN sub-interfaces via their parent
danielinux
committed
2ef1a48
F-10257: encapsulate the echo reply at its declared IP length
danielinux
committed
5e837a4
F-10258: scope ESP unwrap to the declared IP total length
danielinux
committed
e1f66ae
F-8571: add ESP state persistence callbacks for reboot survival
danielinux
committed
e4080ed
F-10272: add per-connection IP_TOS setsockopt for outgoing DSCP
danielinux
committed
b52ca27
F-10266: document the no-IPv4-fragmentation forwarding deviation
danielinux
committed
6fc38d1
F-10275: enforce strict T1 < T2 < lease in DHCP lease timers
danielinux
committed
696ec43
F-9806: validate DHCP chaddr/yiaddr and defer config commit to ACK
danielinux
committed
9c3bc4b
F-9807: re-arm on re-SYN and fast-fail the pre-accept listener pin
danielinux
committed
43b3573
skoll: re-SYN cap, listener-revert drain, esp restore, ttl OOB guard
danielinux
committed
86fc318
F-10267: fix OOB writes in truncated-header test
danielinux
committed
e4858e1

Commits on Aug 20, 2026

restore fresh-socket option baseline in listener revert
danielinux
committed
b5e5d5d