Mcdc test coverage - part 7

CMakeLists.txt

@@ -4510,6 +4510,9 @@ if(WOLFSSL_EXAMPLES)
         tests/api/test_evp.c
         tests/api/test_tls_ext.c
         tests/api/test_tls.c
+        tests/api/test_tls_bounds.c
+        tests/api/test_tls_msgtype.c
+        tests/api/test_tls_parse.c
         tests/api/test_session.c
         tests/api/test_x509.c
         tests/api/test_asn.c
@@ -4550,6 +4553,8 @@ if(WOLFSSL_EXAMPLES)
         tests/api/test_evp_pkey.c
         tests/api/test_certman.c
         tests/api/test_tls13.c
+        tests/api/test_tls13_bounds.c
+        tests/api/test_tls13_features.c
         tests/srp.c
         tests/suites.c
         tests/w64wrapper.c

tests/api.c

@@ -268,6 +268,9 @@
 #include <tests/api/test_evp.h>
 #include <tests/api/test_tls_ext.h>
 #include <tests/api/test_tls.h>
+#include <tests/api/test_tls_bounds.h>
+#include <tests/api/test_tls_msgtype.h>
+#include <tests/api/test_tls_parse.h>
 #include <tests/api/test_session.h>
 #include <tests/api/test_x509.h>
 #include <tests/api/test_asn.h>
@@ -309,6 +312,8 @@
 #include <tests/api/test_evp_pkey.h>
 #include <tests/api/test_certman.h>
 #include <tests/api/test_tls13.h>
+#include <tests/api/test_tls13_bounds.h>
+#include <tests/api/test_tls13_features.h>
 #if !defined(NO_CERTS) && defined(WOLFSSL_ASN_TEMPLATE) && defined(HAVE_ECC)
 #include <tests/api/test_x500_unique_id_certs.h>
 #endif
@@ -40276,6 +40281,8 @@ TEST_CASE testCases[] = {
     TEST_DECL(test_wolfSSL_set_options),
 
     TEST_TLS13_DECLS,
+    TEST_TLS13_BOUNDS_DECLS,
+    TEST_TLS13_FEATURES_DECLS,
 
     TEST_DECL(test_wolfSSL_tmp_dh),
     TEST_DECL(test_wolfSSL_tmp_dh_regression),
@@ -40678,6 +40685,9 @@ TEST_CASE testCases[] = {
     TEST_DECL(test_ocsp_responder),
     TEST_DECL(test_wolfIO_DecodeUrl_crlf_reject),
     TEST_TLS_DECLS,
+    TEST_TLS_BOUNDS_DECLS,
+    TEST_TLS_MSGTYPE_DECLS,
+    TEST_TLS_PARSE_DECLS,
     TEST_SESSION_DECLS,
     TEST_DECL(test_wc_DhSetNamedKey),
     TEST_DECL(test_DhAgree_rejects_p_minus_1),

tests/api/include.am

@@ -81,6 +81,9 @@ tests_unit_test_SOURCES += tests/api/test_ocsp.c
 tests_unit_test_SOURCES += tests/api/test_evp.c
 tests_unit_test_SOURCES += tests/api/test_tls_ext.c
 tests_unit_test_SOURCES += tests/api/test_tls.c
+tests_unit_test_SOURCES += tests/api/test_tls_bounds.c
+tests_unit_test_SOURCES += tests/api/test_tls_msgtype.c
+tests_unit_test_SOURCES += tests/api/test_tls_parse.c
 tests_unit_test_SOURCES += tests/api/test_session.c
 # Certs
 tests_unit_test_SOURCES += tests/api/test_x509.c
@@ -138,6 +141,8 @@ tests_unit_test_SOURCES += tests/api/test_evp_pkey.c
 tests_unit_test_SOURCES += tests/api/test_certman.c
 # TLS 1.3 specific
 tests_unit_test_SOURCES += tests/api/test_tls13.c
+tests_unit_test_SOURCES += tests/api/test_tls13_bounds.c
+tests_unit_test_SOURCES += tests/api/test_tls13_features.c
 endif
 
 EXTRA_DIST += tests/api/api.h
@@ -216,6 +221,9 @@ EXTRA_DIST += tests/api/create_x500_unique_id_certs.py
 EXTRA_DIST += tests/api/test_evp.h
 EXTRA_DIST += tests/api/test_tls_ext.h
 EXTRA_DIST += tests/api/test_tls.h
+EXTRA_DIST += tests/api/test_tls_bounds.h
+EXTRA_DIST += tests/api/test_tls_msgtype.h
+EXTRA_DIST += tests/api/test_tls_parse.h
 EXTRA_DIST += tests/api/test_session.h
 EXTRA_DIST += tests/api/test_x509.h
 EXTRA_DIST += tests/api/test_asn.h
@@ -256,4 +264,6 @@ EXTRA_DIST += tests/api/test_evp_cipher.h
 EXTRA_DIST += tests/api/test_evp_pkey.h
 EXTRA_DIST += tests/api/test_certman.h
 EXTRA_DIST += tests/api/test_tls13.h
+EXTRA_DIST += tests/api/test_tls13_bounds.h
+EXTRA_DIST += tests/api/test_tls13_features.h
 

tests/api/test_aes.c

@@ -8520,7 +8520,7 @@ int test_wc_AesFeatureCoverage(void)
  * GCM/GMAC block works on all of them, so it only excludes HAVE_SELFTEST; the
  * CCM block additionally excludes old FIPS (its AAD-only case diverges there,
  * see the per-block note); the key-wrap block excludes all FIPS + self-test.
- * The open MC/DC campaign builds are unaffected. */
+ * The open MC/DC builds are unaffected. */
 #if !defined(NO_AES) && defined(HAVE_AESGCM) && !defined(HAVE_SELFTEST)
     /* ---- AES-GCM streaming API: multi-chunk AAD and data ---- */
     /* Uses a hardcoded 256-bit key, so requires AES-256. */

tests/api/test_chacha.c

@@ -73,7 +73,7 @@ int test_wc_Chacha_SetKey(void)
 
     /* misaligned key pointer: exercises the (wc_ptr_t)key % 4 realignment
      * decision in wc_Chacha_SetKey when XSTREAM_ALIGN is forced on (the
-     * xstream_align campaign variant). settings.h compiles XSTREAM_ALIGN out
+     * xstream_align variant). settings.h compiles XSTREAM_ALIGN out
      * by default on x86_64/i386/ia64 (NO_XSTREAM_ALIGN), so this call is a
      * harmless no-op realignment-free copy on every other build. */
     {

tests/api/test_dh.c

@@ -39,7 +39,7 @@
  * DH_MAX_SIZE expands to WC_BITS_FULL_BYTES(SP_INT_BITS), and
  * WC_BITS_FULL_BYTES(x) is defined as (WC_BITS_TO_BYTES(x) << 3) - i.e. it
  * returns SP_INT_BITS itself (rounded up to a byte multiple), NOT
- * SP_INT_BITS/8 as its name suggests. With this campaign's SP_INT_BITS 4096,
+ * SP_INT_BITS/8 as its name suggests. With this suite's SP_INT_BITS 4096,
  * DH_MAX_SIZE is therefore 4096 (bytes!), not the 512 a caller would
  * reasonably expect. Passing that value as *privSz (a requested private-key
  * size, not just a buffer capacity) to wc_DhGenerateKeyPair overflows the

tests/api/test_ecc.c

@@ -2712,12 +2712,12 @@ int test_wc_EccPrivateKeyToDer(void)
 /*
  * MC/DC wave 1 - decision-targeted negative/edge paths for wolfcrypt/src/
  * ecc.c that the existing (already extensive) API tests above do not drive.
- * Each block cites the GAPS.md line:col:cond it targets. No library source
+ * Each block cites the the uncovered-condition report line:col:cond it targets. No library source
  * is changed; every case is reached through the public wc_ecc_* API.
  *
  * Split into several functions (test_wc_EccDecisionCoverage{,2,3,4}) rather
  * than one large one: a single function covering this many independent
- * decisions produced a stack-corrupting crash under this campaign's
+ * decisions produced a stack-corrupting crash under this suite's
  * -fcoverage-mcdc + -O0 combination (reproduced with gdb: a plain on-stack
  * mp_int's used/size fields were already garbage immediately after its own
  * mp_init(), and clearing it then walked off the end of its dp[] array and
@@ -2747,7 +2747,7 @@ int test_wc_EccDecisionCoverage(void)
 #endif
     ExpectIntEQ(ret, 0);
 
-    /* ---- wc_ecc_set_curve: GAPS.md 1927 ----
+    /* ---- wc_ecc_set_curve: the uncovered-condition report 1927 ----
      * if (key == NULL || (keysize <= 0 && curve_id < 0))
      * key==NULL true side is already exercised elsewhere (BAD_FUNC_ARG on a
      * NULL key is a common pattern); complete the compound's other operand
@@ -2763,7 +2763,7 @@ int test_wc_EccDecisionCoverage(void)
     ExpectIntEQ(wc_ecc_set_curve(&key, KEY32, -1), 0);
 #endif
 
-    /* ---- wc_ecc_get_curve_id: GAPS.md 4317 ----
+    /* ---- wc_ecc_get_curve_id: the uncovered-condition report 4317 ----
      * if (wc_ecc_is_valid_idx(curve_idx) && curve_idx >= 0)
      * curve_idx == -1 makes wc_ecc_is_valid_idx() true (ECC_CUSTOM_IDX is
      * a valid "user-supplied params" index) but curve_idx>=0 false: the
@@ -2774,14 +2774,14 @@ int test_wc_EccDecisionCoverage(void)
     ExpectIntEQ(wc_ecc_get_curve_id(key.idx), ECC_SECP256R1);
 #endif
 
-    /* ---- wc_ecc_get_curve_params: GAPS.md 4654 ----
+    /* ---- wc_ecc_get_curve_params: the uncovered-condition report 4654 ----
      * if (curve_idx >= 0 && curve_idx < (int)ECC_SET_COUNT)
      * both boundary violations (negative, and >= COUNT) plus a valid idx. */
     ExpectNull(wc_ecc_get_curve_params(-1));
     ExpectNull(wc_ecc_get_curve_params(1000000));
     ExpectNotNull(wc_ecc_get_curve_params(key.idx));
 
-    /* ---- wc_ecc_point_is_at_infinity: GAPS.md 5320 ----
+    /* ---- wc_ecc_point_is_at_infinity: the uncovered-condition report 5320 ----
      * if (mp_iszero(p->x) && mp_iszero(p->y))
      * Unique-cause MC/DC for a 2-operand AND needs THREE vectors within
      * this same binary: (T,T), (F,T), (T,F) (the existing pointFns test's
@@ -2805,7 +2805,7 @@ int test_wc_EccDecisionCoverage(void)
         wc_ecc_del_point(inf);
     }
 
-    /* ---- wc_ecc_gen_k: GAPS.md 5335 ----
+    /* ---- wc_ecc_gen_k: the uncovered-condition report 5335 ----
      * if (rng==NULL || size<0 || size+8>ECC_MAXSIZE_GEN || k==NULL ||
      *                                                       order==NULL)
      * Exercise each operand's TRUE side individually against an otherwise
@@ -2832,7 +2832,7 @@ int test_wc_EccDecisionCoverage(void)
     }
 #endif
 
-    /* ---- wc_ecc_init_id: GAPS.md 6479, 6483 ----
+    /* ---- wc_ecc_init_id: the uncovered-condition report 6479, 6483 ----
      * if (ret == 0 && (len < 0 || len > ECC_MAX_ID_LEN)) -> BUFFER_E
      * if (ret == 0 && id != NULL && len != 0) -> copy branch
      * Exercise: len<0, len>MAX, id==NULL (len!=0 skipped), len==0 (id!=NULL
@@ -2855,7 +2855,7 @@ int test_wc_EccDecisionCoverage(void)
         XMEMSET(&idKey, 0, sizeof(idKey));
         ExpectIntEQ(wc_ecc_init_id(&idKey, NULL, 0, NULL, INVALID_DEVID), 0);
         wc_ecc_free(&idKey);
-        /* id != NULL, len == 0: GAPS.md 6483's 3rd operand (len != 0)
+        /* id != NULL, len == 0: the uncovered-condition report 6483's 3rd operand (len != 0)
          * independence pair -- id!=NULL fixed TRUE across this call and
          * the all-true "copy" call below, len toggled 0 vs nonzero. */
         XMEMSET(&idKey, 0, sizeof(idKey));
@@ -2868,7 +2868,7 @@ int test_wc_EccDecisionCoverage(void)
     }
     #endif
 
-    /* ---- wc_ecc_init_label: GAPS.md 6503, 6507 ----
+    /* ---- wc_ecc_init_label: the uncovered-condition report 6503, 6507 ----
      * if (key == NULL || label == NULL)
      * if (labelLen == 0 || labelLen > ECC_MAX_LABEL_LEN) */
     #ifdef WOLF_PRIVATE_KEY_ID
@@ -2898,7 +2898,7 @@ int test_wc_EccDecisionCoverage(void)
     #endif
 
 #if defined(HAVE_ECC_SIGN) && !defined(NO_ASN)
-    /* ---- wc_ecc_sign_hash / wc_ecc_sign_hash_ex: GAPS.md 6909, 7443 ----
+    /* ---- wc_ecc_sign_hash / wc_ecc_sign_hash_ex: the uncovered-condition report 6909, 7443 ----
      * if ((inlen > WC_MAX_DIGEST_SIZE) || (inlen < WC_MIN_DIGEST_SIZE_FOR_SIGN))
      * The signVerify_hash test above already shows the ">MAX" true side;
      * complete the other operand with a too-short digest. */
@@ -2919,7 +2919,7 @@ int test_wc_EccDecisionCoverage(void)
 #endif
         /* wc_ecc_sign_hash() has its OWN copy of this length check (it does
          * not delegate to wc_ecc_sign_hash_ex() before running it), so
-         * GAPS.md 7443 (wc_ecc_sign_hash_ex's identical check) needs a
+         * the uncovered-condition report 7443 (wc_ecc_sign_hash_ex's identical check) needs a
          * direct call in the SAME test binary to independently show its own
          * MC/DC pair -- llvm-cov computes independence per-binary, so
          * showing the FALSE side via signVerify_hash's normal-length call
@@ -2947,7 +2947,7 @@ int test_wc_EccDecisionCoverage(void)
 #endif /* HAVE_ECC_SIGN && !NO_ASN */
 
 #if defined(HAVE_ECC_VERIFY) && defined(WOLFSSL_PUBLIC_MP)
-    /* ---- wc_ecc_verify_hash_ex: GAPS.md 9476 ----
+    /* ---- wc_ecc_verify_hash_ex: the uncovered-condition report 9476 ----
      * Same reasoning as wc_ecc_sign_hash_ex above: wc_ecc_verify_hash()
      * does not delegate through this check, so it needs its own direct
      * short-hash call in this binary. */
@@ -2970,7 +2970,7 @@ int test_wc_EccDecisionCoverage(void)
     }
 #endif
 
-    /* ---- wc_ecc_free: GAPS.md 8209 ----
+    /* ---- wc_ecc_free: the uncovered-condition report 8209 ----
      * if (key->deallocSet && key->dp != NULL)
      * Exercise the "deallocSet but dp already NULL" and "dp set but
      * deallocSet false" independence halves via wc_ecc_set_custom_curve
@@ -3025,7 +3025,7 @@ int test_wc_EccDecisionCoverage2(void)
 
 #if defined(HAVE_ECC_VERIFY) && !defined(WOLFSSL_SP_MATH) && \
     defined(WOLFSSL_PUBLIC_MP)
-    /* ---- wc_ecc_check_r_s_range (via wc_ecc_verify_hash_ex): GAPS.md
+    /* ---- wc_ecc_check_r_s_range (via wc_ecc_verify_hash_ex): the uncovered-condition report
      * 8939, 8942 ----
      * if ((err == 0) && (mp_cmp(r, curve->order) != MP_LT)) -> r >= order
      * if ((err == 0) && (mp_cmp(s, curve->order) != MP_LT)) -> s >= order
@@ -3056,7 +3056,7 @@ int test_wc_EccDecisionCoverage2(void)
 #endif
 
     /* ---- wc_ecc_import_point_der_ex / wc_ecc_export_point_der{,_compressed}:
-     * GAPS.md 9710, 9964, 9970, 9975, 9984, 10030, 10037, 10042 ---- */
+     * the uncovered-condition report 9710, 9964, 9970, 9975, 9984, 10030, 10037, 10042 ---- */
 #if defined(HAVE_ECC_KEY_EXPORT) && defined(HAVE_ECC_KEY_IMPORT)
     {
         ecc_point* point = NULL;
@@ -3102,10 +3102,10 @@ int test_wc_EccDecisionCoverage2(void)
         {
             /* wc_ecc_export_point_der_compressed is WOLFSSL_LOCAL (hidden in a
              * shared library), so it is not linkable from the shared-library
-             * unit test; its own decision coverage is driven by the campaign's
+             * unit test; its own decision coverage is driven by the
              * ecc white-box (which includes ecc.c directly). The public
              * compressed export path wc_ecc_export_x963_ex(..., 1) is exercised
-             * here (GAPS.md 16058, the static wc_ecc_export_x963_compressed
+             * here (the uncovered-condition report 16058, the static wc_ecc_export_x963_compressed
              * helper). */
 #ifdef HAVE_ECC_KEY_EXPORT
             {
@@ -3124,7 +3124,7 @@ int test_wc_EccDecisionCoverage2(void)
     }
 #endif /* HAVE_ECC_KEY_EXPORT && HAVE_ECC_KEY_IMPORT */
 
-    /* ---- wc_ecc_is_point: GAPS.md 10304, 10329, 10332, 10390, 10396,
+    /* ---- wc_ecc_is_point: the uncovered-condition report 10304, 10329, 10332, 10390, 10396,
      * 10403 ----
      * Direct call (rather than through wc_ecc_point_is_on_curve) with a
      * point that is genuinely ON the curve (the generator) and the
@@ -3191,7 +3191,7 @@ int test_wc_EccDecisionCoverage3(void)
     ExpectIntEQ(ret, 0);
 
     /* ---- wc_ecc_export_public_raw / wc_ecc_export_private_raw:
-     * GAPS.md 11477, 11484, 11538, 11548 ---- */
+     * the uncovered-condition report 11477, 11484, 11538, 11548 ---- */
 #if defined(HAVE_ECC_KEY_EXPORT)
     {
         byte   qx[MAX_ECC_BYTES], qy[MAX_ECC_BYTES], d[MAX_ECC_BYTES];
@@ -3207,12 +3207,12 @@ int test_wc_EccDecisionCoverage3(void)
             &qyLen), WC_NO_ERR_TRACE(ECC_BAD_ARG_E));
         wc_ecc_free(&noDpKey);
 
-        /* d != NULL but dLen == NULL: GAPS.md 11484 first operand. */
+        /* d != NULL but dLen == NULL: the uncovered-condition report 11484 first operand. */
         qxLen = sizeof(qx); qyLen = sizeof(qy);
         ExpectIntEQ(wc_ecc_export_private_raw(&key, qx, &qxLen, qy, &qyLen,
             d, NULL), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
 
-        /* d != NULL, dLen != NULL, but key type is public-only: GAPS.md
+        /* d != NULL, dLen != NULL, but key type is public-only: the uncovered-condition report
          * 11484 second operand. */
         {
             ecc_key pubOnly;
@@ -3229,13 +3229,13 @@ int test_wc_EccDecisionCoverage3(void)
             ExpectIntEQ(wc_ecc_export_private_raw(&pubOnly, NULL, NULL,
                 NULL, NULL, d, &dLen), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
 
-            /* qx != NULL, qxLen == NULL: GAPS.md 11538 first operand. */
+            /* qx != NULL, qxLen == NULL: the uncovered-condition report 11538 first operand. */
             ExpectIntEQ(wc_ecc_export_private_raw(&key, qx, NULL, NULL,
                 NULL, NULL, NULL), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
-            /* qy != NULL, qyLen == NULL: GAPS.md 11548 first operand. */
+            /* qy != NULL, qyLen == NULL: the uncovered-condition report 11548 first operand. */
             ExpectIntEQ(wc_ecc_export_private_raw(&key, NULL, NULL, qy,
                 NULL, NULL, NULL), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
-            /* qx != NULL against a PRIVATEKEY_ONLY key: GAPS.md 11538
+            /* qx != NULL against a PRIVATEKEY_ONLY key: the uncovered-condition report 11538
              * second operand (type == ECC_PRIVATEKEY_ONLY). */
             pubOnly.type = ECC_PRIVATEKEY_ONLY;
             qxbLen = sizeof(qxb);
@@ -3250,7 +3250,7 @@ int test_wc_EccDecisionCoverage3(void)
     }
 #endif /* HAVE_ECC_KEY_EXPORT */
 
-    /* ---- wc_ecc_rs_raw_to_sig: GAPS.md 12015 ---- */
+    /* ---- wc_ecc_rs_raw_to_sig: the uncovered-condition report 12015 ---- */
     {
         byte   r[KEY32], s[KEY32], sig[ECC_MAX_SIG_SIZE];
         word32 sigLen = sizeof(sig);
@@ -3269,7 +3269,7 @@ int test_wc_EccDecisionCoverage3(void)
             NULL), WC_NO_ERR_TRACE(ECC_BAD_ARG_E));
     }
 
-    /* ---- wc_ecc_import_private_key_ex: GAPS.md 11671 (_ecc_import_
+    /* ---- wc_ecc_import_private_key_ex: the uncovered-condition report 11671 (_ecc_import_
      * private_key_ex key==NULL||priv==NULL, reached via the public
      * wrapper's own identical pre-check, same independence pair) ---- */
 #if defined(HAVE_ECC_KEY_IMPORT)
@@ -3313,7 +3313,7 @@ int test_wc_EccDecisionCoverage4(void)
 #endif
     ExpectIntEQ(ret, 0);
 
-    /* ---- ecc_mul2add argument guard: GAPS.md 8446 ----
+    /* ---- ecc_mul2add argument guard: the uncovered-condition report 8446 ----
      * NOT closeable by any current variant, API or white-box: both bodies
      * of ecc_mul2add() (the argument-checked "normal" one at line ~8417 and
      * the Shamir/fixed-point-cache one at line ~13909 that supersedes it
@@ -3324,13 +3324,13 @@ int test_wc_EccDecisionCoverage4(void)
      * exercises the unchecked Shamir body under the name ecc_mul2add) or
      * turns BOTH ECC_SHAMIR and FP_ECC OFF together (no_fp_shamir, per its
      * config_base's philosophy of flipping the FALSE side of both feature
-     * guards at once -- see modules.json's ecc notes), which compiles
+     * guards at once -- see the module registry's ecc notes), which compiles
      * *neither* body, making ecc_mul2add an undefined symbol there (link
      * failure, confirmed empirically). Reaching this decision needs a new,
      * not-yet-scaffolded variant: ECC_SHAMIR on + FP_ECC off. Classified as
      * a needs-variant residual; see RESIDUALS.md. */
 
-    /* ---- wc_ecc_ctx_set_kdf_salt: GAPS.md 14607 ----
+    /* ---- wc_ecc_ctx_set_kdf_salt: the uncovered-condition report 14607 ----
      * if (ctx == NULL || (salt == NULL && sz != 0))
      * ctx==NULL already the common BAD_FUNC_ARG idiom shown elsewhere; add
      * the salt==NULL/sz!=0 half here with a live ctx. */
@@ -3347,7 +3347,7 @@ int test_wc_EccDecisionCoverage4(void)
     }
 #endif
 
-    /* ---- wc_ecc_set_custom_curve: GAPS.md 16181 ---- */
+    /* ---- wc_ecc_set_custom_curve: the uncovered-condition report 16181 ---- */
 #if defined(WOLFSSL_CUSTOM_CURVES)
     {
         ecc_key ccKey2;
@@ -3361,7 +3361,7 @@ int test_wc_EccDecisionCoverage4(void)
     }
 #endif
 
-    /* ---- wc_X963_KDF: GAPS.md 16217, 16221 ---- */
+    /* ---- wc_X963_KDF: the uncovered-condition report 16217, 16221 ---- */
     #ifdef HAVE_X963_KDF
     {
         byte   secret[16];

tests/api/test_hash.c

@@ -999,7 +999,7 @@ int test_wc_HashDecisionCoverage(void)
      * these types, so hash->type is never one of them and the debug check
      * always intercepts here, making the arm unreachable in DEBUG builds
      * (non-DEBUG builds cover it). Not a value workaround -- the arm's
-     * coverage simply comes from non-DEBUG variants in the campaign union. */
+     * coverage simply comes from non-DEBUG variants in the harness union. */
 #ifndef DEBUG_WOLFSSL
     ExpectIntEQ(wc_HashUpdate(&hash, WC_HASH_TYPE_MD5_SHA, (byte*)"a", 1),
         WC_NO_ERR_TRACE(HASH_TYPE_E));