wolfcrypt/src/hmac.c: fix FIPS version gate on wc_HmacFree() in wc_HmacSetKey().

douzzer · douzzer · commit c44d4213064d · 2025-12-18T16:05:09.000-06:00
diff --git a/wolfcrypt/src/hmac.c b/wolfcrypt/src/hmac.c
@@ -392,7 +392,7 @@ int wc_HmacSetKey(Hmac* hmac, int type, const byte* key, word32 length)
         return BAD_FUNC_ARG;
     }
 
-#ifndef HAVE_FIPS
+#if !defined(HAVE_FIPS) || FIPS_VERSION3_GE(5,0,0)
     /* if set key has already been run then make sure and free existing */
     /* This is for async and PIC32MZ situations, and just normally OK,
        provided the user calls wc_HmacInit() first. That function is not

Original file line number	Diff line number	Diff line change
`@@ -392,7 +392,7 @@ int wc_HmacSetKey(Hmac* hmac, int type, const byte* key, word32 length)`
`392`	`392`	`return BAD_FUNC_ARG;`
`393`	`393`	`}`
`394`	`394`
`395`		`-#ifndef HAVE_FIPS`
	`395`	`+#if !defined(HAVE_FIPS) \|\| FIPS_VERSION3_GE(5,0,0)`
`396`	`396`	`/* if set key has already been run then make sure and free existing */`
`397`	`397`	`/* This is for async and PIC32MZ situations, and just normally OK,`
`398`	`398`	`provided the user calls wc_HmacInit() first. That function is not`