Infrastructure for Mc/Dc test coverage + AES coverage campaign#10845

Merged

dgarske merged 28 commits into

wolfSSL:masterfrom

danielinux:mcdc-test-coverage

Jul 9, 2026

Commits on Jul 9, 2026

tests: add MC/DC decision/feature coverage tests
danielinux
committed
tests: AES MC/DC white-box supplement + api decision/feature coverage
danielinux
committed
tests: guard internal-symbol MC/DC tests with WOLFSSL_TEST_STATIC_BUILD
danielinux
committed
tests: fix config-dependent AES-CTR rounds-check coverage assertion
danielinux
committed
tests: fix -Werror/config-gating failures in MC/DC coverage tests
danielinux
committed
tests: replace non-ASCII chars in MC/DC test comments/docs
danielinux
committed
tests: skip AES rounds-corruption checks under WOLF_CRYPTO_CB_FIND
danielinux
committed
tests: guard AES tests for cryptocb-only and no-AES-192/256 configs
danielinux
committed
tests: fix X509V3_EXT leak, C++ build, and no-client link
danielinux
committed
tests: skip AES rounds-corruption checks under WOLFSSL_ARMASM
danielinux
committed
tests: fix AesKeyExport lifecycle-tag leak and server-only session-cache test
danielinux
committed
tests: guard AesSetKey/Cmac ArgMcdc tests for the older FIPS API
danielinux
committed
tests: guard AesModes/AesGcm ArgMcdc tests for the older FIPS API
danielinux
committed
tests: zero-init ccmTag to satisfy clang-tidy
danielinux
committed
build: register HAVE_PQC in known-macro extras
danielinux
committed
tests: fix AUTHORITY_INFO_ACCESS leak under OPENSSL_EXTRA-only builds
danielinux
committed
tests/unit-mcdc: white-box the AES-NI internal pointer guards
danielinux
committed
tests: skip AES rounds-corruption under FIPS/self-test (fixes CCM segfault)
danielinux
committed
tests: guard Gmac/AesGcmSetExtIV tests for the self-test module
danielinux
committed
tests: skip whole AesCcmArgMcdc under FIPS/self-test (fixes v5 segfault)
danielinux
committed
tests: skip RsaDecisionCoverage under the self-test module
danielinux
committed
tests: skip AesFeatureCoverage GCM/CCM under the self-test module
danielinux
committed
tests: also exclude old FIPS from AesFeatureCoverage CCM block
danielinux
committed
tests: make RsaDecisionCoverage padding-mismatch check deterministic
danielinux
committed
tests: keep test_wolfSSL_X509V3_EXT OPENSSL_ALL-only
danielinux
committed
tests: address review findings (dead HAVE_PQC guard, guard/style cleanups)
danielinux
committed
tests: keep OQS_SIG_keypair() out of ExpectIntEQ
danielinux
committed
tests: import the falcon benchmark key instead of OQS keygen
danielinux
committed