picotls Audit Findings Security audit of picotls, a TLS 1.3 implementation in C. Each finding includes a detailed write-up and a patch. Summary Total findings: 11 -- High: 7, Medium: 4 Findings TLS 1.2 record path # Finding Severity 001 TLS 1.2 receive path suppresses decryption errors High AEAD / AES-GCM # Finding Severity 002 Unchecked AES-GCM resize NULL-dereferences on encrypt High 003 Setup reports success after AES-GCM allocation failure High 010 AEAD constructor failure is reported as success High 012 Decrypt underflows ciphertext length before tag split High Key generation & ECDH # Finding Severity 007 Keygen failure proceeds into ECDH state Medium 008 One-shot ECDH ignores key generation failure Medium Signature handling # Finding Severity 009 Signature generation failure ignored Medium RSA key parsing # Finding Severity 006 RSA key-bit parser overreads short DER input Medium QUIC-LB packet protection # Finding Severity 013 Assert-only length guard allows mask index underflow High 014 Split input overruns block buffers for oversized lengths High