From ca292d8ac6f35fab6bc558c0c2d14aa8d2b9615e Mon Sep 17 00:00:00 2001
From: jordan <jordan@wolfssl.com>
Date: Sun, 9 Aug 2026 22:36:42 -0500
Subject: [PATCH] bsdkm driver: add missing CipherLifecycleInit call.

---
 bsdkm/wolfkmod.c | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/bsdkm/wolfkmod.c b/bsdkm/wolfkmod.c
index d7a55b1462..faa570e87b 100644
--- a/bsdkm/wolfkmod.c
+++ b/bsdkm/wolfkmod.c
@@ -763,6 +763,19 @@ static int wolfkdriv_cbc_work(device_t dev, wolfkdriv_session_t * session,
         is_encrypt = 0;
         memcpy(&aes, &session->aes_ctx.aes_decrypt, sizeof(aes));
     }
+#if defined(WOLFSSL_AESGCM_STREAM) && defined(WOLFSSL_SMALL_STACK) && \
+   !defined(WOLFSSL_AESNI)
+    aes.streamData = NULL;
+#endif
+#ifdef WC_DEBUG_CIPHER_LIFECYCLE
+    {
+        error = wc_debug_CipherLifecycleInit(&aes.CipherLifecycleTag, NULL);
+        if (error) {
+            error = EINVAL;
+            goto cbc_work_out;
+        }
+    }
+#endif
 
     /* must be multiple of block size */
     if (data_len % WC_AES_BLOCK_SIZE) {
@@ -911,6 +924,15 @@ static int wolfkdriv_gcm_work(device_t dev, wolfkdriv_session_t * session,
    !defined(WOLFSSL_AESNI)
     aes.streamData = NULL;
 #endif
+#ifdef WC_DEBUG_CIPHER_LIFECYCLE
+    {
+        error = wc_debug_CipherLifecycleInit(&aes.CipherLifecycleTag, NULL);
+        if (error) {
+            error = EINVAL;
+            goto gcm_work_out;
+        }
+    }
+#endif
 
     data_len = crp->crp_payload_length;
     if (CRYPTO_OP_IS_ENCRYPT(crp->crp_op)) {