mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-10-24 04:09:07 +03:00
The A100/A110 stsafe_verify wrote *pResult before validating any of its arguments, unlike the A120 variant which rejects NULL inputs. Move the argument validation (pointers plus hashSz) ahead of the *pResult write and the buffer allocation, so a NULL argument returns BAD_FUNC_ARG instead of dereferencing, and the early return happens before the SMALL_STACK buffers are allocated. Addresses the PR review note on *pResult before validation.