Deep copy revoked cert entry extensions in DupCRL_Entry()

[gasbytes]

Description

Deep copy revoked cert entry extensions in DupCRL_Entry() when CRL_STATIC_REVOKED_LIST and OPENSSL_EXTRA are enabled, and add a regression test for the X509_CRL_dup path.

Fixes zd#

Testing

Added regression test test_wolfSSL_CRL_static_revoked_list_dup in the testsuite;

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Pull request overview

This PR fixes an ownership/aliasing bug when duplicating CRLs in configurations that use a static revoked list and OpenSSL-compat behavior: revoked-entry extension DER buffers are now deep-copied in DupCRL_Entry() to avoid duplicated CRLs sharing the same extensions pointers. It also adds a regression test that exercises the wolfSSL_X509_CRL_dup() path and asserts the duplicated CRL owns distinct extension buffers.

Changes:

• Deep-copy RevokedCert.extensions buffers during CRL_Entry duplication when CRL_STATIC_REVOKED_LIST + OPENSSL_EXTRA are enabled.
• Add a regression test for wolfSSL_X509_CRL_dup() ensuring revoked-entry extension buffers are not aliased.
• Register the new test in the cert manager API test list.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
src/crl.c	Fixes DupCRL_Entry() to allocate/copy per-entry extension buffers to prevent pointer aliasing/double-free risks.
tests/api/test_certman.c	Adds regression test covering X509_CRL_dup for static revoked list extension ownership.
tests/api/test_certman.h	Declares and registers the new regression test in the certman test group.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.