add missing wc_AesFree on AesGcmSetKey failure in key/data unwrap

[jackctj117]

This pull request introduces a small but important fix to the AES-GCM key handling logic. Specifically, it ensures that resources are properly freed if key setup fails, preventing potential memory leaks.

• Memory management improvements:
  • Added calls to wc_AesFree(aes) in both _AesGcmKeyUnwrap and _AesGcmDataUnwrap to free AES context memory if wc_AesGcmSetKey fails. (src/wh_server_keystore.c) [1] [2]

[Copilot]

Pull request overview

This PR fixes an AES-GCM resource cleanup gap in the server keystore unwrap paths so the AES context is freed when wc_AesGcmSetKey fails, preventing leaks (especially relevant for HW-backed AES contexts).

Changes:

• Add wc_AesFree(aes) on wc_AesGcmSetKey failure in _AesGcmKeyUnwrap.
• Add wc_AesFree(aes) on wc_AesGcmSetKey failure in _AesGcmDataUnwrap.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.