tests: free the AES context on a GCM key failure

test_DoReceive_AeadTagFailure() marks decryptCipher initialized and
sets its cipher type as soon as wc_AesInit() succeeds, so a later
wc_AesGcmSetKey() failure still leaves wolfSSH_free() a context that
CipherClear() will free. Matches what CipherSetKey() does in the
library.

- give the key-set failure its own result code, so the split reports
  which of the two calls failed

Author: ejohnstown

tests/unit.c

@@ -1866,13 +1866,19 @@ static int test_DoReceive_AeadTagFailure(void)
     /* Tamper with a ciphertext byte so the tag check must fail. */
     record[UINT32_SZ] ^= 0x01;
 
-    if (wc_AesInit(&ssh->decryptCipher.aes, ssh->ctx->heap, INVALID_DEVID) != 0
-            || wc_AesGcmSetKey(&ssh->decryptCipher.aes, key, sizeof(key)) != 0) {
+    if (wc_AesInit(&ssh->decryptCipher.aes, ssh->ctx->heap,
+            INVALID_DEVID) != 0) {
         result = -226;
         goto done;
     }
+    /* claim the context before setting the key so wolfSSH_free frees it
+     * even if the key set fails */
     ssh->decryptCipher.isInit = 1;
     ssh->decryptCipher.cipherType = ID_AES256_GCM;
+    if (wc_AesGcmSetKey(&ssh->decryptCipher.aes, key, sizeof(key)) != 0) {
+        result = -230;
+        goto done;
+    }
     ssh->peerEncryptId = ID_AES256_GCM;
     ssh->peerAeadMode = 1;
     ssh->peerBlockSz = AES_BLOCK_SIZE;