[kareem-wolfssl]

Description

Fixes zd#22620

Testing

Built in tests

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

[kareem-wolfssl]

@claude review

[github-actions]

MemBrowse Memory Report · Explore what changed →

zephyr-frdm_rw612

• FLASH: log_const_area -8 B, rodata -8 B, text +1,600 B (+0.6%, 284,048 B / 67,108,864 B, total: 0% used)

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• stm32-sim-stm32h753

---

_{Catch memory regressions in CI with MemBrowse. Free for open source.}

[claude]

Nothing blocking. The comments below are optional suggestions. There is no need to push a fix for them before merging.

Beyond the inline finding, I also checked the ML-DSA side. With WC_MLDSA_NO_AVX2 set, every AVX512 dispatch in wc_mldsa.c sits under WOLFSSL_MLDSA_HAVE_INTEL_AVX512, so it compiles out and nothing reaches it at runtime through IS_INTEL_AVX512. The IS_INTEL_AVX2 and SHA3_USE_AVX2 overrides come after their definitions in cpuid.h and sha3.h and before their first use. The header gate in wc_mldsa.h only removes function prototypes and doesn't change any struct layout.

Extended reasoning...

One finding was already reported, about the AES asm guards. This note covers the ML-DSA half of the change, which was checked separately and showed no issue: the AVX512 code is fully compiled out, the macro overrides are in the right place, and the header gate changes no struct layout.

[kareem-wolfssl]

Retest this please