Copilot fixes

Author: jackctj117

src/wh_server_crypto.c

@@ -4785,7 +4785,7 @@ static int _HandleSha256Dma(whServerContext* ctx, uint16_t magic, int devId,
         }
         else {
             /* Validate buffLen from untrusted context */
-            if (sha256->buffLen > WC_SHA256_BLOCK_SIZE) {
+            if (sha256->buffLen >= WC_SHA256_BLOCK_SIZE) {
                 ret = WH_ERROR_BADARGS;
             }
             else {
@@ -4913,7 +4913,7 @@ static int _HandleSha224Dma(whServerContext* ctx, uint16_t magic, int devId,
         }
         else {
             /* Validate buffLen from untrusted context */
-            if (sha224->buffLen > WC_SHA224_BLOCK_SIZE) {
+            if (sha224->buffLen >= WC_SHA224_BLOCK_SIZE) {
                 ret = WH_ERROR_BADARGS;
             }
             else {
@@ -5041,7 +5041,7 @@ static int _HandleSha384Dma(whServerContext* ctx, uint16_t magic, int devId,
         }
         else {
             /* Validate buffLen from untrusted context */
-            if (sha384->buffLen > WC_SHA384_BLOCK_SIZE) {
+            if (sha384->buffLen >= WC_SHA384_BLOCK_SIZE) {
                 ret = WH_ERROR_BADARGS;
             }
             else {
@@ -5169,7 +5169,7 @@ static int _HandleSha512Dma(whServerContext* ctx, uint16_t magic, int devId,
         }
         else {
             /* Validate buffLen from untrusted context */
-            if (sha512->buffLen > WC_SHA512_BLOCK_SIZE) {
+            if (sha512->buffLen >= WC_SHA512_BLOCK_SIZE) {
                 ret = WH_ERROR_BADARGS;
             }
             else {

test/wh_test_clientserver.c

@@ -974,9 +974,11 @@ int whTest_ClientServerSequential(whTestNvmBackendType nvmType)
 #ifdef WOLFHSM_CFG_DMA
     {
         /* Register DMA allow list for the buffers used in DMA NVM tests.
-         * meta is declared here so its address is stable for the allow list */
-        whNvmMetadata meta = {0};
-        whServerDmaAddrAllowList nvm_dma_allow = {0};
+         * static so the server's retained pointer remains valid */
+        static whNvmMetadata meta;
+        static whServerDmaAddrAllowList nvm_dma_allow;
+        memset(&meta, 0, sizeof(meta));
+        memset(&nvm_dma_allow, 0, sizeof(nvm_dma_allow));
         nvm_dma_allow.readList[0].addr  = send_buffer;
         nvm_dma_allow.readList[0].size  = sizeof(send_buffer);
         nvm_dma_allow.readList[1].addr  = &meta;
@@ -1365,9 +1367,11 @@ int whTest_ClientServerClientConfig(whClientConfig* clientCfg)
 #ifdef WOLFHSM_CFG_DMA
     {
         /* Register DMA allow list for the buffers used in DMA NVM tests.
-         * meta is declared here so its address is stable for the allow list */
-        whNvmMetadata meta = {0};
-        whServerDmaAddrAllowList nvm_dma_allow = {0};
+         * static so the server's retained pointer remains valid */
+        static whNvmMetadata meta;
+        static whServerDmaAddrAllowList nvm_dma_allow;
+        memset(&meta, 0, sizeof(meta));
+        memset(&nvm_dma_allow, 0, sizeof(nvm_dma_allow));
         nvm_dma_allow.readList[0].addr  = send_buffer;
         nvm_dma_allow.readList[0].size  = sizeof(send_buffer);
         nvm_dma_allow.readList[1].addr  = &meta;