Prevent session ticket nonce overflow

[Frauschi]

F-204

[douzzer]

[allcryptonly-gcc-c89] [20 of 56] [81a691f13d]
    configure...   real 0m8.089s  user 0m4.478s  sys 0m4.389s
In file included from ./wolfssl/ssl.h:35,
                 from ./wolfssl/openssl/ssl.h:39,
                 from ./wolfssl/openssl/aes.h:44,
                 from conftest.c:78:
8690a9da4b (<tobias@wolfssl.com> 2026-03-05 17:45:42 +0100 243)     WOLFSSL_LAST_E               = -517,
./wolfssl/error-ssl.h:243:40: error: comma at end of enumerator list [-Werror=pedantic]
  243 |     WOLFSSL_LAST_E               = -517,
      |                                        ^

[Copilot]

Pull request overview

This PR adds overflow protection for session ticket nonces in TLS 1.3. Since the nonce is stored as a single byte, it can overflow after 255 tickets, and this change prevents that by returning a new error code.

Changes:

• Adds a new error code SESSION_TICKET_NONCE_OVERFLOW (-517) to the error enum.
• Adds an overflow check in SendTls13NewSessionTicket before incrementing the nonce.
• Adds the corresponding human-readable error string in wolfSSL_ERR_reason_error_string.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
wolfssl/error-ssl.h	Adds new SESSION_TICKET_NONCE_OVERFLOW error code and updates WOLFSSL_LAST_E
src/tls13.c	Adds nonce overflow check before incrementing the ticket nonce
src/internal.c	Adds error string mapping for the new error code

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Frauschi]

./wolfssl/error-ssl.h:243:40: error: comma at end of enumerator list [-Werror=pedantic]
  243 |     WOLFSSL_LAST_E               = -517,
      |                                        ^

Fixed now.

[Frauschi]

Jenkins retest this please

[Frauschi]

Jenkins retest this please