From f540bb3ddfef89db637809392522247ce3e8200c Mon Sep 17 00:00:00 2001
From: Mattia Moffa <mattia@moffa.xyz>
Date: Mon, 13 Apr 2026 16:46:19 +0200
Subject: [PATCH] SetSuitesHashSigAlgo fix

ZD#21599
---
 src/internal.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/internal.c b/src/internal.c
index 267c75a5d6..769ba6764c 100644
--- a/src/internal.c
+++ b/src/internal.c
@@ -29546,6 +29546,17 @@ int SetSuitesHashSigAlgo(Suites* suites, const char* list)
                     break;
                 }
             }
+            {
+                word32 needed = 2;
+#if defined(WC_RSA_PSS) && defined(WOLFSSL_TLS13)
+                if (sig_alg == rsa_pss_sa_algo)
+                    needed = 4;
+#endif
+                if ((word32)idx + needed > WOLFSSL_MAX_SIGALGO) {
+                    ret = 0;
+                    break;
+                }
+            }
             AddSuiteHashSigAlgo(suites->hashSigAlgo, mac_alg, sig_alg, 0, &idx);
             sig_alg = 0;
             mac_alg = no_mac;