From 699744c8b6bdc45fffcaaceb6999f64410df8a48 Mon Sep 17 00:00:00 2001
From: aidan garske <aidangarske03@gmail.com>
Date: Tue, 16 Jun 2026 12:38:26 -0700
Subject: [PATCH] Guard Base16_Encode output sizing against word32 wraparound

---
 wolfcrypt/src/coding.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/wolfcrypt/src/coding.c b/wolfcrypt/src/coding.c
index b3f804fcf0..a96d4d5ae5 100644
--- a/wolfcrypt/src/coding.c
+++ b/wolfcrypt/src/coding.c
@@ -675,6 +675,9 @@ int Base16_Encode(const byte* in, word32 inLen, byte* out, word32* outLen)
     if (in == NULL || out == NULL || outLen == NULL)
         return BAD_FUNC_ARG;
 
+    if (inLen > (WOLFSSL_MAX_32BIT / 2))
+        return BAD_FUNC_ARG;
+
     if (*outLen < (2 * inLen))
         return BAD_FUNC_ARG;