Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FIX: Ledger Audit Vulnerabilities #1

Closed
wants to merge 35 commits into from
Closed

Conversation

n4l5u0r
Copy link

@n4l5u0r n4l5u0r commented Nov 8, 2024

FIX: Ledger Audit Vulnerabilities

Z4karia and others added 30 commits October 28, 2024 17:23
- Move debug-helpers/debug.h inclusion out of DEBUG=1 condition
- Keep -g flag only for debug builds
- change 'Blooo' to 'Acre'
- generate golden snapshots
- Remove inclusion of debug-helpers/debug.h from default CFLAGS.
- Add inclusion of debug-helpers/debug.h to CFLAGS only when DEBUG=1.
- Ensure CFLAGS includes -g for debugging when DEBUG=1.
- change "Blooo" to "Acre"
- generate golden snapshots
Fix: address Ledger's audit vulnerabilities
- Replace hardcoded `domain_separator_hash` with `abi_encoded_chain_id` for mainnet and testnet variants.
- Add `domain_separator_typehash`.
- Add function `compute_domain_separator_hash`
- Update `compute_tx_hash` to include domain separator hash computation.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants