Fix v185 fwtpm complaince issue with auth entry

[aidangarske]

F-9186

[Copilot]

Pull request overview

This PR addresses fwTPM v185 compliance issue F-9186 by ensuring that TPM_ST_SESSIONS commands that require authorization cannot omit required authorization sessions, and adds a unit test to prevent regressions.

Changes:

• Enforce TPM_RC_AUTH_MISSING when a TPM_ST_SESSIONS command provides fewer auth sessions than the command’s declared authHandleCnt.
• Add a unit test that constructs a TPM_ST_SESSIONS TPM2_Clear command with authAreaSz = 0 and validates the expected rejection.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
tests/fwtpm_unit_tests.c	Adds a regression test for rejecting TPM_ST_SESSIONS commands with an empty auth area when an auth handle is present.
src/fwtpm/fwtpm_command.c	Adds an explicit auth-entry-count check to return TPM_RC_AUTH_MISSING when required auth entries are missing.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #566

Scan targets checked: wolftpm-bugs, wolftpm-src

Findings: 4
4 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.