Fenrir fixes

[JeremiahM37]

Fixes F-1916, F-1907, F-1911, F-1915, F-1909, F-1913, F-1914

• Fix NULL drbg pointer dereference in wc_RNG_DRBG_Reseed on non-Intel platforms when HAVE_INTEL_RDSEED/HAVE_INTEL_RDRAND are not defined
• Save key->heap before wc_FreeRsaKey in wc_DeleteRsaKey to prevent use-after-free on the heap hint
• Add NULL parameter checks to Base64_Decode, Base64_Decode_nonCT, and DoBase64_Encode matching existing Base16_Decode pattern
• Reject non-block-aligned input with BAD_LENGTH_E in RC2, Camellia, and DES/DES3 CBC encrypt/decrypt instead of silently truncating

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10136

Scan targets checked: wolfcrypt-api_misuse, wolfcrypt-bugs, wolfcrypt-compliance, wolfcrypt-concurrency, wolfcrypt-port, wolfcrypt-port-bugs, wolfcrypt-portability, wolfcrypt-src

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

[dgarske]

🐺 Skoll Code Review

Overall recommendation: APPROVE
Findings: 3 total — 3 posted, 2 skipped

Posted findings

• [Medium] Des3 CBC alignment check placed after crypto callback and async dispatch — wolfcrypt/src/des3.c:1822,1877
• [Medium] No test coverage for new BAD_LENGTH_E alignment checks — tests/api/test_camellia.c, tests/api/test_des3.c, tests/api/test_rc2.c
• [Low] DoBase64_Encode NULL check placed after arithmetic on inLen — wolfcrypt/src/coding.c:480-484

Skipped findings

• [Medium] Des3 CBC alignment check placed after crypto callback and async dispatch
• [Medium] No test coverage for new BAD_LENGTH_E alignment checks

Review generated by Skoll via openclaw

[JeremiahM37]

Jenkins retest this please