Fenrir wolfPKCS11 Findings and Test Additions

[aidangarske]

Description

Verified with new tests

• 1618 - C_FindObjects/C_FindObjectsFinal missing operation check test in test_find_objects_null_template
• 1619 - C_Logout no login check test in test_logout_not_logged_in
• 1620 - C_CreateObject/C_CopyObject/C_DestroyObject blocking RO session objects test in test_create_session_obj_ro_session
• 1622 - C_SetAttributeValue blocking RO session objects test in test_create_session_obj_ro_session
• 1623 - C_WrapKey incorrectly requiring RW session test in test_wrap_key_ro_session
• 1624 - C_UnwrapKey blocking RO session objects test in test_wrap_key_ro_session
• 1630 - C_Encrypt CK_ULONG-to-word32 truncation test in test_encrypt_data_len_range
• 1632 - C_EncryptUpdate truncation test in test_encrypt_data_len_range
• 1633 - C_DecryptUpdate truncation test in test_encrypt_data_len_range
• 1634 - C_Decrypt AES-CBC/ECB truncation test in test_encrypt_data_len_range

Verified by static analysis / code inspection

• 1617 - C_GetAttributeValue early return on first bad attribute
• 1621 - C_VerifyRecoverInit missing operation-active check
• 1629 - C_GenerateKeyPair dangling pointers on error path

Generic code review verification

• 1607 - OAEP label leak on re-init
• 1608 - wc_ecc_set_rng called after failed Rng_New
• 1609 - WP11_Rsa_Verify_Recover missing token lock
• 1612 - GCM AAD leak on re-init
• 1613 - CCM AAD leak on re-init
• 1614 - WP11_Rsa_Sign lock acquired after key access
• 1615 - WP11_EC_Derive lock acquired too late
• 1631 - PIN hash left on stack without secure clearing

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #177

Scan targets checked: wolfpkcs11-bugs, wolfpkcs11-compliance, wolfpkcs11-src

No new issues found in the changed files. ✅