Fix from review

Author: embhorn

wolfcrypt/test/test.c

@@ -27617,15 +27617,17 @@ static wc_test_ret_t dh_fips_generate_test(WC_RNG *rng)
      * GeneratePrivateDh186 writes (*privSz + 8) bytes of RNG output into the
      * stack-allocated cBuf (sized DH_MAX_SIZE + 8 in non-WOLFSSL_SMALL_STACK
      * builds). The key still has q set here, so the call dispatches through
-     * GeneratePrivateDh186. */
+     * GeneratePrivateDh186. Accept BAD_FUNC_ARG from src/dh.c's bound check
+     * or MP_VAL from the FIPS-validated module's own param validation. */
     {
         word32 hugePrivSz = (word32)DH_MAX_SIZE + 1;
         word32 outPubSz   = sizeof(pub);
         ret = wc_DhGenerateKeyPair(key, rng, priv, &hugePrivSz, pub, &outPubSz);
     #if defined(WOLFSSL_ASYNC_CRYPT)
         ret = wc_AsyncWait(ret, &key->asyncDev, WC_ASYNC_FLAG_NONE);
     #endif
-        if (ret != WC_NO_ERR_TRACE(BAD_FUNC_ARG))
+        if (ret != WC_NO_ERR_TRACE(BAD_FUNC_ARG) &&
+            ret != WC_NO_ERR_TRACE(MP_VAL))
             ERROR_OUT(WC_TEST_RET_ENC_EC(ret), exit_gen_test);
     }
 #endif /* !WOLFSSL_NO_DH186 */