PKCS7: only wait for an 00 00 ending on indefinite EncryptedContentInfo

[padelsbach]

Description

This fixes a CI failure on master following merge of #11490 and #11554.

ERROR - tests/api/test_pkcs7.c line 4668 failed with:
    expected: pkcs7_decodeShortTag(enveloped, encSz) == (ASN_PARSE_E)
    result:   -270 != -140

Change is to use the indefEci flag to decide whether to look for the two trailing bytes.

Testing

CI

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Copilot review overview

🟢 Approval recommended

The focused change correctly distinguishes definite and indefinite encodings and addresses the existing regression test.

Review effort: Balanced
Findings: None

What changed in this PR

Fixes PKCS#7 streaming decode of definite-length EncryptedContentInfo by avoiding an erroneous wait for an end-of-contents marker.

Changes:

• Adds EOC lookahead only when indefEci is set.
• Restores expected short-tag validation behavior.

File	Description
wolfcrypt/​src/​pkcs7.c	Makes stream buffering conditional on indefinite-length encoding.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• linuxkm-standard
• stm32-sim-stm32h753

[dgarske]

Merging early to unblock CI