Add UDP support to NetX sockets for DTLS sessions by hmohide · Pull Request #10408 · wolfSSL/wolfssl

hmohide · 2026-05-06T14:42:42Z

Description

Add UDP support to NetX sockets for DTLS sessions

Fixes zd#

src/internal.c
src/wolfio.c
wolfssl/internal.h
wolfssl/wolfio.h

Testing

Yes, verified the DTLS communication with multiple session

Checklist

added tests
updated/added doxygen
updated appropriate READMEs
Updated manual and documentation

wolfSSL-Bot · 2026-05-06T14:45:09Z

Can one of the admins verify this patch?

dgarske · 2026-05-06T14:49:59Z

Okay to test. Contributor agreement on file. Thank you @hmohide

night1rider · 2026-05-06T19:00:15Z

#10414 Should fix the zephyr tests if you rebase to pull in the updated workflow

github-actions · 2026-05-06T23:10:06Z

MemBrowse Memory Report

gcc-arm-cortex-m0plus

FLASH: .text +612 B (+1.0%, 64,107 B / 262,144 B, total: 24% used)

gcc-arm-cortex-m3

FLASH: .text +812 B (+0.7%, 122,221 B / 262,144 B, total: 47% used)

gcc-arm-cortex-m4

FLASH: .rodata.wolfSSL_ERR_reason_error_string.str1.1 +18 B, .text +832 B (+0.4%, 199,902 B / 262,144 B, total: 76% used)

gcc-arm-cortex-m4-baremetal

FLASH: .text +704 B (+1.1%, 66,763 B / 262,144 B, total: 25% used)

gcc-arm-cortex-m4-crypto-only

FLASH: .text +640 B (+0.4%, 174,314 B / 262,144 B, total: 66% used)

gcc-arm-cortex-m4-dtls13

FLASH: .text +832 B (+0.5%, 180,632 B / 1,048,576 B, total: 17% used)

gcc-arm-cortex-m4-min-ecc

FLASH: .text +640 B (+1.0%, 61,677 B / 262,144 B, total: 24% used)

gcc-arm-cortex-m4-openssl-compat

FLASH: .rodata +208 B, .text +1,408 B (+0.2%, 769,748 B / 1,048,576 B, total: 73% used)

gcc-arm-cortex-m4-pkcs7

FLASH: .text +832 B (+0.4%, 212,206 B / 262,144 B, total: 81% used)

gcc-arm-cortex-m4-pq

FLASH: .rodata +24 B, .text +1,088 B (+0.4%, 279,048 B / 1,048,576 B, total: 27% used)

gcc-arm-cortex-m4-rsa-only

FLASH: .rodata +24 B, .text +1,152 B (+0.4%, 324,648 B / 1,048,576 B, total: 31% used)

gcc-arm-cortex-m4-sp-math

FLASH: .text +640 B (+1.0%, 61,677 B / 262,144 B, total: 24% used)

gcc-arm-cortex-m4-tls12

FLASH: .text +768 B (+0.6%, 122,957 B / 262,144 B, total: 47% used)

gcc-arm-cortex-m4-tls13

FLASH: .rodata.wolfSSL_ERR_reason_error_string.str1.1 +18 B, .text +1,024 B (+0.4%, 235,728 B / 262,144 B, total: 90% used)

gcc-arm-cortex-m7

FLASH: .rodata.wolfSSL_ERR_reason_error_string.str1.1 +18 B, .text +832 B (+0.4%, 199,902 B / 262,144 B, total: 76% used)

gcc-arm-cortex-m7-pq

FLASH: .rodata +24 B, .text +1,088 B (+0.4%, 279,624 B / 1,048,576 B, total: 27% used)

gcc-arm-cortex-m7-tls13

FLASH: .rodata.wolfSSL_ERR_reason_error_string.str1.1 +18 B, .text +1,024 B (+0.4%, 235,792 B / 262,144 B, total: 90% used)

linuxkm-pie

Data: __patchable_function_entries +1,128 B (+4.6%, 25,416 B)

linuxkm-standard

Data: __patchable_function_entries +2,032 B (+4.4%, 48,048 B)

stm32-sim-stm32h753

FLASH: .text +1,392 B (+0.8%, 183,076 B / 2,097,152 B, total: 9% used)

hmohide · 2026-05-07T14:09:58Z

@dgarskeI think above failure not triggered by the changes? Do i need to make some change? Please guide

dgarske · 2026-05-07T17:02:01Z

Hi @hmohide these would all be solved by a rebase against latest master and force push. Please go ahead and do that. Thanks

dgarske

Skoll Code Review

Scan type: reviewOverall recommendation: REQUEST_CHANGES
Findings: 9 total — 9 posted, 0 skipped
7 finding(s) posted as inline comments (see file-level comments below)

Posted findings

[High] DTLS NetX receive maps timeouts to fatal error, breaking retransmission — src/wolfio.c:2659-2665
[Medium] wolfSSL_SetIO_NetX_Dtls stores caller pointers dereferenced much later (lifetime hazard) — src/wolfio.c:2751-2759, wolfssl/internal.h:5719-5721
[Medium] DTLS receive does not capture peer address (single fixed-peer limitation) — src/wolfio.c:2644-2694
[Medium] New public API and DTLS IO callbacks have no test coverage — src/wolfio.c:2644-2759
[Medium] New public API lacks doxygen; existing doxygen references renamed nxSocket field — wolfssl/wolfio.h:798-801
[Medium] DTLS NetX path requires NetX Duo APIs without a guard — src/wolfio.c:2729-2745
[Low] NetX_SendTo uses Allman braces and missing space after 'if' (style mismatch) — src/wolfio.c:2729-2745
[Low] Trailing whitespace will fail wolfSSL whitespace CI check — src/wolfio.c:2640,2708,2736,2744,2754; wolfssl/internal.h:5718; wolfssl/wolfio.h:795,798-801
[Low] Incorrect/misleading struct member comments (nxPort, nxUdpSocket) — wolfssl/internal.h:5719-5721

Review generated by Skoll

dgarske

@hmohide Our internal AI review found several items to consider: #10408 (review)

hmohide · 2026-06-12T09:18:51Z

@dgarske i have updated the review comments

- Replace non-ASCII em-dash with ASCII hyphen in NetX_ReceiveFrom comment to pass wolfSSL encoding/whitespace CI check - Add WOLFSSL_NETX_DUO to .wolfssl_known_macro_extras so the macro checker no longer flags it as unrecognized

dgarske · 2026-06-15T15:50:25Z

Jenkins retest this please "Build 'wolfSSL/PRB-fips-repo-and-harness-test-v3-part2' failed with result: FAILURE"

Copilot

Pull request overview

This PR adds NetX Duo UDP I/O callback support so DTLS sessions can run over NetX sockets (in addition to existing NetX TCP/TLS support), and wires the appropriate callbacks/context initialization into the default wolfSSL initialization paths.

Changes:

Add NetX Duo DTLS UDP I/O callbacks (NetX_ReceiveFrom / NetX_SendTo) and a public configuration API (wolfSSL_SetIO_NetX_Dtls).
Update NetX context structure to track separate TCP vs UDP socket handles and UDP destination addressing.
Select UDP callbacks automatically for DTLS methods in InitSSL_Ctx() and ensure DTLS I/O contexts point at ssl->nxCtx when NetX is enabled.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
`wolfssl/wolfio.h`	Adds public API and local callback prototypes for NetX Duo DTLS UDP I/O.
`wolfssl/internal.h`	Extends NetX I/O context to distinguish TCP vs UDP and store DTLS destination addressing.
`src/wolfio.c`	Implements NetX Duo DTLS UDP send/receive callbacks and updates existing NetX TCP callbacks to use renamed context fields.
`src/internal.c`	Selects NetX DTLS UDP callbacks for DTLS contexts and fixes DTLS default I/O ctx initialization for NetX.
`doc/dox_comments/header_files/wolfio.h`	Updates NetX docs and adds Doxygen for the new DTLS NetX Duo UDP API.
`doc/dox_comments/header_files-ja/wolfio.h`	Japanese doc updates/additions corresponding to the NetX changes.
`.wolfssl_known_macro_extras`	Registers `WOLFSSL_NETX_DUO` as a known macro.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

dgarske

Skoll Code Review

Scan type: reviewOverall recommendation: COMMENT
Findings: 5 total — 4 posted, 1 skipped
4 finding(s) posted as inline comments (see file-level comments below)

Posted findings

[Medium] NetX_ReceiveFrom does not validate the datagram source peer — src/wolfio.c:2645-2718
[Medium] DTLS 1.3 quick-timeout can divide to zero and fall back to nxWait, disabling retransmission — src/wolfio.c:2662-2675
[Low] Zero-length datagram returns 0 instead of being ignored — src/wolfio.c:2692-2717
[Low] Redundant repeated wolfSSL_dtls_get_using_nonblock() calls — src/wolfio.c:2662-2685

Skipped findings

[Medium] ~~No test coverage for new NetX DTLS UDP callbacks~~

Review generated by Skoll

hmohide · 2026-06-23T14:21:29Z

@dgarske i have rebased. can you please review and approve

dgarske · 2026-06-23T14:56:36Z

Jenkins retest this please. History lost

dgarske · 2026-06-23T22:12:17Z

The CI "Build 'wolfSSL/PRB-fips-repo-and-harness-test-v3-part2' failed with result: FAILURE" is failing only because you have this PR opened on master. We can accept with that known CI issue. We are in a release cycle, so this won't be merged for a few days.

hmohide · 2026-07-01T15:31:52Z

@dgarske any update on this PR. this one of the critical PR required for our relaese

dgarske

Skoll Code Review

Scan type: reviewOverall recommendation: COMMENT
Findings: 4 total — 3 posted, 1 skipped
3 finding(s) posted as inline comments (see file-level comments below)

Posted findings

[Medium] NetX_ReceiveFrom does not reject negative sz before using it as an unsigned length — src/wolfio.c:2668-2806
[Low] Unreachable return at end of NetX_ReceiveFrom (dead code) — src/wolfio.c:2821-2823
[Low] Post-handshake invalid-peer/0-length flood is not rate-limited in blocking mode — src/wolfio.c:2759-2795

Skipped findings

[Low] ~~No test coverage for new DTLS NetX Duo I/O callbacks~~

Review generated by Skoll

dgarske · 2026-07-01T20:31:53Z

@dgarske any update on this PR. this one of the critical PR required for our relaese

Just a few minor items to review here -> #10408 (review)
You are welcome to push back / reject items that are not required/needed.

dgarske · 2026-07-06T15:09:15Z

Okay to test. Thank you @hmohide

dgarske · 2026-07-06T16:19:45Z

Jenkins retest this please "ERROR: Error fetching remote repo 'origin'"

dgarske

Skoll Code Review

Scan type: reviewOverall recommendation: COMMENT
Findings: 4 total — 3 posted, 1 skipped
3 finding(s) posted as inline comments (see file-level comments below)

Posted findings

[Medium] NetX_ReceiveFrom retains leftover datagram bytes, diverging from DTLS datagram semantics — src/wolfio.c:2809-2832
[Low] NetX_SendTo silently uses IPv6 path when destination address version is unset — src/wolfio.c:2870-2878
[Low] wolfSSL_SetIO_NetX_Dtls does not reset any buffered packet/offset state — src/wolfio.c:2889-2899

Skipped findings

[Medium] ~~No test coverage for new NetX Duo DTLS UDP callbacks~~

Review generated by Skoll

dgarske

#10408 (review)

Always release the full datagram after each read instead of buffering leftover bytes across calls. Matches EmbedReceiveFrom/recvfrom behavior.

dgarske · 2026-07-08T15:48:58Z

Jenkins retest this please.

dgarske · 2026-07-08T19:24:00Z

Our PRB CI won't pass the FIPS test because you did this from "master" however I know the changes do not impact FIPS. So I am going to accept as-is. Thank you for being an approved contributor.

Add UDP support to NetX sockets for DTLS sessions

5db48e5

hmohide mentioned this pull request May 6, 2026

Add UDP support to NetX sockets for DTLS sessions #10273

Closed

4 tasks

dgarske assigned wolfSSL-Bot May 6, 2026

dgarske assigned hmohide May 7, 2026

Added the guard with WOLFSSL_DTLS

38d62bb

dgarske unassigned hmohide Jun 10, 2026

dgarske self-requested a review June 10, 2026 16:42

dgarske approved these changes Jun 10, 2026

View reviewed changes

dgarske reviewed Jun 10, 2026

View reviewed changes

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c

Comment thread src/wolfio.c

Comment thread wolfssl/wolfio.h Outdated

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c Outdated

Comment thread wolfssl/internal.h

dgarske requested changes Jun 10, 2026

View reviewed changes

dgarske assigned hmohide Jun 10, 2026

updated the review comments

730cdcc

dgarske requested changes Jun 12, 2026

View reviewed changes

Comment thread src/wolfio.c Outdated

Comment thread wolfssl/internal.h

wolfio: fix review comments for DTLS NetX UDP support

e59b7cd

- Replace non-ASCII em-dash with ASCII hyphen in NetX_ReceiveFrom comment to pass wolfSSL encoding/whitespace CI check - Add WOLFSSL_NETX_DUO to .wolfssl_known_macro_extras so the macro checker no longer flags it as unrecognized

dgarske self-requested a review June 15, 2026 15:54

dgarske unassigned hmohide Jun 15, 2026

dgarske requested a review from Copilot June 15, 2026 18:38

Copilot started reviewing on behalf of dgarske June 15, 2026 18:39 View session

Copilot AI reviewed Jun 15, 2026

View reviewed changes

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c Outdated

Comment thread doc/dox_comments/header_files/wolfio.h

Comment thread doc/dox_comments/header_files-ja/wolfio.h Outdated

dgarske reviewed Jun 15, 2026

View reviewed changes

Comment thread src/wolfio.c

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c Outdated

Comment thread src/wolfio.c Outdated

dgarske assigned hmohide Jun 15, 2026

updated review comments

542f30c

dgarske self-requested a review June 23, 2026 14:56

dgarske assigned dgarske and unassigned hmohide Jun 23, 2026

dgarske reviewed Jul 1, 2026

View reviewed changes

Comment thread src/wolfio.c

Comment thread src/wolfio.c

Comment thread src/wolfio.c

dgarske assigned hmohide and unassigned wolfSSL-Bot Jul 1, 2026

hmohide added 2 commits July 3, 2026 15:03

corrected the review comments

6a12739

Updated the review comment

9255db8

dgarske assigned wolfSSL-Bot Jul 6, 2026

dgarske self-requested a review July 6, 2026 16:19

dgarske approved these changes Jul 6, 2026

View reviewed changes

dgarske unassigned dgarske and hmohide Jul 6, 2026

dgarske reviewed Jul 7, 2026

View reviewed changes

Comment thread src/wolfio.c

Comment thread src/wolfio.c

Comment thread src/wolfio.c

dgarske assigned hmohide Jul 7, 2026

dgarske requested changes Jul 7, 2026

View reviewed changes

wolfio: fix NetX_ReceiveFrom to use DTLS datagram truncation semantics

19e7cc6

Always release the full datagram after each read instead of buffering leftover bytes across calls. Matches EmbedReceiveFrom/recvfrom behavior.

dgarske self-requested a review July 8, 2026 15:48

dgarske unassigned hmohide Jul 8, 2026

dgarske approved these changes Jul 8, 2026

View reviewed changes

dgarske merged commit c2b9cc5 into wolfSSL:master Jul 8, 2026
299 of 300 checks passed

Uh oh!

Conversation

hmohide commented May 6, 2026

Description

Testing

Checklist

Uh oh!

wolfSSL-Bot commented May 6, 2026

Uh oh!

dgarske commented May 6, 2026

Uh oh!

night1rider commented May 6, 2026

Uh oh!

github-actions Bot commented May 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

MemBrowse Memory Report

Uh oh!

hmohide commented May 7, 2026

Uh oh!

dgarske commented May 7, 2026

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Skoll Code Review

Posted findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Uh oh!

hmohide commented Jun 12, 2026

Uh oh!

Uh oh!

Uh oh!

dgarske commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Skoll Code Review

Posted findings

Skipped findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

hmohide commented Jun 23, 2026

Uh oh!

dgarske commented Jun 23, 2026

Uh oh!

dgarske commented Jun 23, 2026

Uh oh!

hmohide commented Jul 1, 2026

Uh oh!

dgarske left a comment

Choose a reason for hiding this comment

Skoll Code Review

Posted findings

Skipped findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

dgarske commented Jul 1, 2026

github-actions Bot commented May 6, 2026 •

edited

Loading

dgarske commented Jun 15, 2026 •

edited

Loading