From 3893fd3c6e1031261af4ff9470846dc4789607af Mon Sep 17 00:00:00 2001
From: Eric Blankenhorn <eric@wolfssl.com>
Date: Tue, 31 Mar 2026 09:41:51 -0500
Subject: [PATCH] Fix feedback from review

---
 tests/api/test_x509.c | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/tests/api/test_x509.c b/tests/api/test_x509.c
index aa993608d0..6590c24f83 100644
--- a/tests/api/test_x509.c
+++ b/tests/api/test_x509.c
@@ -643,16 +643,27 @@ int test_x509_CertFromX509_akid_overflow(void)
 {
     EXPECT_DECLS;
 #if defined(WOLFSSL_AKID_NAME) && defined(WOLFSSL_CERT_GEN) && \
-    defined(WOLFSSL_CERT_EXT) && \
+    defined(WOLFSSL_CERT_EXT) && !defined(NO_BIO) && \
     (defined(OPENSSL_EXTRA) || defined(OPENSSL_ALL))
     /* DER builder helpers -- write into a flat buffer */
+#ifdef WOLFSSL_SMALL_STACK
+    unsigned char* buf = NULL;
+#else
     unsigned char buf[16384];
+#endif
     size_t pos = 0;
     size_t akid_val_len;
     unsigned char* akid_val = NULL;
     WOLFSSL_X509* x = NULL;
     WOLFSSL_BIO* bio = NULL;
 
+#ifdef WOLFSSL_SMALL_STACK
+    buf = (unsigned char*)XMALLOC(16384, NULL, DYNAMIC_TYPE_TMP_BUFFER);
+    ExpectNotNull(buf);
+    if (buf == NULL)
+        return EXPECT_RESULT();
+#endif
+
     #define PUT1(b) do { buf[pos++] = (b); } while(0)
     #define PUTN(p, n) do { XMEMCPY(buf + pos, (p), (n)); pos += (n); } while(0)
 
@@ -840,6 +851,9 @@ int test_x509_CertFromX509_akid_overflow(void)
     wolfSSL_BIO_free(bio);
     wolfSSL_X509_free(x);
     XFREE(akid_val, NULL, DYNAMIC_TYPE_TMP_BUFFER);
+#ifdef WOLFSSL_SMALL_STACK
+    XFREE(buf, NULL, DYNAMIC_TYPE_TMP_BUFFER);
+#endif
 
     #undef PUT1
     #undef PUTN