From f3596a39c51cb5bd4a82b877d3c084e1bb2987ee Mon Sep 17 00:00:00 2001
From: Kareem <kareem@wolfssl.com>
Date: Tue, 30 Jun 2026 17:10:26 -0700
Subject: [PATCH] Fix incorrect argument being passed to wc_InitDecodedCert. 
 Should be the heap rather than the CM.

Reported-by: Asif Nadaf <postasif@protonmail.com>
---
 src/certman.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/certman.c b/src/certman.c
index 661d5c5d9..1352b37d0 100644
--- a/src/certman.c
+++ b/src/certman.c
@@ -369,7 +369,7 @@ int wolfSSH_CERTMAN_VerifyCerts_buffer(WOLFSSH_CERTMAN* cm,
     if (ret == WS_SUCCESS) {
         DecodedCert decoded;
 
-        wc_InitDecodedCert(&decoded, certLoc[0], certLen[0], cm->cm);
+        wc_InitDecodedCert(&decoded, certLoc[0], certLen[0], cm->heap);
         ret = wc_ParseCert(&decoded, WOLFSSL_FILETYPE_ASN1, 0, cm->cm);
 
         if (ret == 0) {