20260426-fixes

[douzzer]

wolfcrypt/src/wc_slhdsa.c:

• fix smallstackcache memory leaks in sha256 and sha512 contexts -- don't init or copy over a context that's been inited but not freed, and make sure to explicitly free any context that's been inited or copied over.
• fix uninited-var warnings in slhdsakey_wots_sign(), slhdsakey_xmss_sign(), and slhdsakey_fors_sign() (the uninited-var scenario depends on corrupt arg(s) resulting in zero iterations).

wolfcrypt/test/test.c:

• fix aes_eax_test() for NO_MALLOC (use WC_*_VAR() to allocate eax context).
• in slhdsa_test(), gate the profusely verbose TestDumpData() clauses on WC_SLHDSA_VERBOSE_DEBUG.

wolfcrypt/benchmark/benchmark.c: add missing WOLFSSL_USE_SAVE_VECTOR_REGISTERS handling in bench_stats_ops_finish().

wolfcrypt/src/random.c:

• add workaround in Hash512_df() for gcc compiler bug around AVX512 and object alignment.
• add missing WC_VERBOSE_RNG clause.

wolfcrypt/src/wc_lms.c: remove redundant gating on WOLFSSL_LMS_SHAKE256 in wc_LmsParamsMap wc_lms_map[].

wolfcrypt/src/wc_port.c: in wc_socket_cloexec(), add necessary but undocumented __USE_GNU gating on call to accept4() (pre-includes can bring in socket.h before the override setting of _GNU_SOURCE at the top). Also enable accept4() for FreeBSD.

detected by and tested with

wolfssl-mult-test.sh ...
pr-check
allcryptonly-no-malloc-no-wolf-memory
all-disable-asm-assert
all-disable-asm-assert-clang
cppcheck-force-source
linuxkm-defaults-all-quantum-safe-fips-dev-clang-tidy
linuxkm-defaults-all-quantum-safe-fips-dev-noasm-clang-tidy
linuxkm-cryptonly-intelasm-fips-dev-dyn-hash-LKCAPI-yes-twc-insmod-kmemleak
linuxkm-benchmarks-asm-insmod
linuxkm-benchmarks-noasm-insmod
linuxkm-benchmarks-fips-insmod
linuxkm-benchmarks-insmod-kmemleak
linuxkm-benchmarks-insmod-ksanitize
cross-s390x-all-asm-fips-dev
cross-m68k-all-asm-fips-dev
clang-tidy-fips-140-3-dev-defaults
clang-tidy-fips-140-3-dev-defaults-no-sha-1
clang-tidy-fips-140-3-dev-all
clang-tidy-fips-140-3-dev-all-crypto-no-sha-1
sp-all-asm-sanitizer
all-noasm-arch-native-O3-sanitizer
all-noasm-arch-native-O3-gcc-latest-sanitizer
all-asm-arch-native-O3-sanitizer-gcc-latest-no-sp-asm
sp-all-asm-smallstack-sanitizer-fips-140-3-dev
sanitize-fips-140-3-dev

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10324

Scan targets checked: wolfcrypt-bugs, wolfcrypt-src

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-tls12

[douzzer]

retest this please
(timeout in PRB-linuxkm.txt_0 make check, not reproducible)

[douzzer]

note all workflow failures on this PR are unrelated to this PR -- unmet cmake version dependency in most of them, and unrelated missing runtime dependency in socat (socat[18082] W open("/dev/vsock", ...): No such file or directory in socat subtest #410).

edit: and ./Arduino/sketches: No such file or directory on the Arduino workflows.