Add data len check in wh_CommClient_RecvResponse

[padelsbach]

wh_CommClient_RecvResponse does a memcpy into a caller provided buf without checking the length -- the function does not contain a length param, however the calling functions do.

This change adds the data_size param, so this change does break the API. Alternative was to use existing uint16_t* out_size as an inout param, but that felt too sneaky and easy to overlook.

All 130ish callers updated. src-jp references the params (and is updated), but the English src does not.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #388

Scan targets checked: wolfhsm-core-bugs, wolfhsm-crypto-bugs, wolfhsm-src

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

[AlexLanzano]

@padelsbach Please fix the merge conflicts when you can. Thanks

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #388

Scan targets checked: wolfhsm-core-bugs, wolfhsm-crypto-bugs, wolfhsm-src

No new issues found in the changed files. ✅

[AlexLanzano]

@bigbrett Passing this off to you since this is going to technically break the public API but I don't believe that many (if any) customer's directly call the function in question

[bigbrett]

@padelsbach looks great, but this will need to be rebased and then you will see CI fail to show you where new callsites have to be modified (all in the SHE layer)