Release session operation state on replace, error and cancel

src/slot.c

@@ -1842,8 +1842,13 @@ CK_RV C_SetOperationState(CK_SESSION_HANDLE hSession,
         return rv;
     }
 
-    (void)hEncryptionKey;
-    (void)hAuthenticationKey;
+    /* Only keyless digest states can be saved, so no key is ever needed. */
+    if (hEncryptionKey != CK_INVALID_HANDLE ||
+            hAuthenticationKey != CK_INVALID_HANDLE) {
+        rv = CKR_KEY_NOT_NEEDED;
+        WOLFPKCS11_LEAVE("C_SetOperationState", rv);
+        return rv;
+    }
 
     rv = WP11_SetOperationState(session, pOperationState, ulOperationStateLen);
     WOLFPKCS11_LEAVE("C_SetOperationState", rv);

tests/include.am

@@ -320,6 +320,22 @@ noinst_PROGRAMS += tests/login_pin_state_test
 tests_login_pin_state_test_SOURCES = tests/login_pin_state_test.c
 tests_login_pin_state_test_LDADD =
 
+check_PROGRAMS += tests/object_store_decode_test
+noinst_PROGRAMS += tests/object_store_decode_test
+tests_object_store_decode_test_SOURCES = tests/object_store_decode_test.c
+tests_object_store_decode_test_LDADD =
+
+check_PROGRAMS += tests/object_policy_integrity_test
+noinst_PROGRAMS += tests/object_policy_integrity_test
+tests_object_policy_integrity_test_SOURCES = \
+    tests/object_policy_integrity_test.c
+tests_object_policy_integrity_test_LDADD =
+
+check_PROGRAMS += tests/session_op_lifecycle_test
+noinst_PROGRAMS += tests/session_op_lifecycle_test
+tests_session_op_lifecycle_test_SOURCES = tests/session_op_lifecycle_test.c
+tests_session_op_lifecycle_test_LDADD =
+
 if BUILD_STATIC
 tests_pkcs11test_LDADD += src/libwolfpkcs11.la
 tests_pkcs11mtt_LDADD  += src/libwolfpkcs11.la
@@ -385,6 +401,9 @@ tests_set_pin_rekey_test_LDADD += src/libwolfpkcs11.la
 tests_nss_configdir_prefix_test_LDADD += src/libwolfpkcs11.la
 tests_logout_retire_test_LDADD += src/libwolfpkcs11.la
 tests_login_pin_state_test_LDADD += src/libwolfpkcs11.la
+tests_object_store_decode_test_LDADD += src/libwolfpkcs11.la
+tests_object_policy_integrity_test_LDADD += src/libwolfpkcs11.la
+tests_session_op_lifecycle_test_LDADD += src/libwolfpkcs11.la
 else
 tests_object_id_uniqueness_test_LDADD += src/libwolfpkcs11.la
 tests_empty_pin_store_test_LDADD += src/libwolfpkcs11.la
@@ -442,6 +461,9 @@ tests_set_pin_rekey_test_LDADD += src/libwolfpkcs11.la
 tests_nss_configdir_prefix_test_LDADD += src/libwolfpkcs11.la
 tests_logout_retire_test_LDADD += src/libwolfpkcs11.la
 tests_login_pin_state_test_LDADD += src/libwolfpkcs11.la
+tests_object_store_decode_test_LDADD += src/libwolfpkcs11.la
+tests_object_policy_integrity_test_LDADD += src/libwolfpkcs11.la
+tests_session_op_lifecycle_test_LDADD += src/libwolfpkcs11.la
 endif
 
 EXTRA_DIST += tests/unit.h \