[douzzer]

tests/api/test_certman.c and tests/api/test_tls.c: fix null derefs in test_certman_decision_coverage() and test_internal_SetSSL_CTX_DecisionCoverage().

detected by cross-mingw-all-crypto

tested with

wolfssl-multi-test.sh ...
super-quick-check

[Copilot]

🟡 Changes recommended

The test continues after context setup fails and can dereference a NULL certificate manager in allocators that evaluate the heap argument.

1 open issue

• Return when context or certificate-manager setup fails · New

What changed in this PR

This PR addresses null dereferences detected by cross-mingw-all-crypto in wolfSSL’s API decision-coverage tests.

Changes:

• Guard certificate-manager access with EXPECT_SUCCESS().
• Guard TLS context field writes after setup expectations.

File	Description
tests/​api/​test_tls.c	Guards server-hint and method-side writes in SetSSL_CTX coverage tests.
tests/​api/​test_certman.c	Guards access to ctx->cm after context creation.

_{Review effort: Balanced}

[github-actions]

MemBrowse Memory Report · Explore what changed →

zephyr-frdm_rw612

• FLASH: log_const_area -8 B, rodata -8 B, text +1,592 B (+0.6%, 284,040 B / 67,108,864 B, total: 0% used)

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• stm32-sim-stm32h753

---

_{Catch memory regressions in CI with MemBrowse. Free for open source.}

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #12051

Scan targets checked: wolfssl-bugs
Coverage: 2 of 2 in-scope changed file(s) opened by the reviewer

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Reported findings require changes before merge.

Review tier: Max

[Copilot]

🟢 Approval recommended

No active review issues are reported for the pointer-access guards and known-macro list cleanup.

No open issues 🎉

1 resolved since last review

• Return when context or certificate-manager setup fails

_{Review effort: Balanced}

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #12051

Scan targets checked: wolfssl-bugs
Not reviewed (no scan target covers them): .wolfssl_known_macro_extras
Coverage: 1 of 1 in-scope changed file(s) opened by the reviewer

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Lite

Fenrir's latest completed scan found no issues; clearing the prior automated change request.

[philljj]

thanks douzzer!