[aidankeefe2022]

Description

Fenrir 9930: harden protocol rules.

Updated docs to reflect what was assumed by all tests.

Tests

Added a test to check that only proper Flag values are sent to the wc_ecc_ctx_new_ex function

[Copilot]

🟢 Approval recommended

No active review issues were identified for the ECC context flag-validation change.

No open issues 🎉

What changed in this PR

Hardens ECC encryption context creation for Fenrir 9930 by accepting only the supported client and server protocol flags.

Changes:

• Rejects invalid flags before allocating a context or narrowing the flag value.
• Adds tests for invalid, combined, and byte-truncating flag values.
• Documents the accepted flags and updates usage examples.

File	Description
wolfcrypt/​src/​ecc.c	Validates flags in wc_ecc_ctx_new_ex before allocation.
tests/​api/​test_ecc.c	Adds invalid-flag regression tests.
doc/​dox_comments/​header_files/​ecc.h	Clarifies flag requirements and corrects examples.

_{Review effort: Balanced}

[github-actions]

MemBrowse Memory Report · Explore what changed →

zephyr-frdm_rw612

• FLASH: log_const_area -8 B, rodata -8 B, text +1,592 B (+0.6%, 284,040 B / 67,108,864 B, total: 0% used)

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• stm32-sim-stm32h753

---

_{Catch memory regressions in CI with MemBrowse. Free for open source.}

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #12046

Scan targets checked: wolfcrypt-src, wolfcrypt-bugs, wolfssl-bugs
Not reviewed (no scan target covers them): doc/dox_comments/header_files/ecc.h
Coverage: 2 of 2 in-scope changed file(s) opened by the reviewer

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Max