20260106 Coverity fixes

[rlm2002]

Description

Adds WC_CALLOC_VAR_EX() to allocate hmac_copy variable in case the calls to functions before wc_HmacCopy() error out. Before, ERROR_OUT() would attempt to free garbage data when jumping to out label from functions before wc_HmacCopy().

Fixes CID 556176-556182: Uninitialized scalar variable

Testing

./configure --enable-all && make check

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[rlm2002]

Retest this please jenkins: PRB-generic-config-parser #11753 was not stable

[devin-ai-integration]

🛟 Devin Lifeguard found 1 likely issues in this PR

• use-forcezero snippet: Replace each XMEMSET(hmac_copy, 0, sizeof(Hmac)); with ForceZero(hmac_copy, sizeof(Hmac)); to ensure the sensitive Hmac context is securely cleared.

@rlm2002
please take a look at the above issues which Devin flagged. Devin will not fix these issues automatically.

[rlm2002]

Retest this please jenkins: PRB-generic-config-parser was not stable