Add negative test case for CheckPasswordHashUnix

[padelsbach]

Fixes F-2489

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #914

Scan targets checked: wolfssh-bugs, wolfssh-compliance, wolfssh-defaults, wolfssh-mutation, wolfssh-proptest, wolfssh-src, wolfssh-zeroize

No new issues found in the changed files. ✅

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds a targeted negative-path unit test for Unix password hash checking to prevent regressions in the constant-time comparison logic.

Changes:

• Introduces a new unit test test_CheckPasswordHashUnix() that validates both acceptance and rejection paths using crypt().
• Exposes CheckPasswordHashUnix() for unit tests via WOLFSSHD_UNIT_TEST and moves auth success/failure constants to auth.h.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
apps/wolfsshd/test/test_configuration.c	Adds a new negative-path unit test for Unix password hash verification and required includes/feature macros.
apps/wolfsshd/auth.h	Exposes auth result constants and declares CheckPasswordHashUnix() for unit tests.
apps/wolfsshd/auth.c	Makes CheckPasswordHashUnix() non-static under WOLFSSHD_UNIT_TEST so the test can link to it.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.