Code

FIX: Ledger Audit Vulnerabilities#1

Code

Closed

n4l5u0r wants to merge 35 commits intoLedgerHQ:developLedgerHQ/app-acre:developfrom thesis:developthesis/acre-ledger-app:developCopy head branch name to clipboard

+215-65

Commits

Commits on Oct 28, 2024

• fix: app update audit fix

  Z4karia

  committed
  cd1ff73

  Copy full SHA for cd1ff73

• bump version

  Z4karia

  committed
  4758913

  Copy full SHA for 4758913

Commits on Oct 29, 2024

• Merge pull request #19 from blooo-io/fix/app-update-audit-fix

  Show description for 980875b
  Z4karia

  authored
  980875b

  Copy full SHA for 980875b

• ui: update function name

  Z4karia

  committed
  a8126c8

  Copy full SHA for a8126c8

• update credits

  Z4karia

  committed
  3dfc63e

  Copy full SHA for 3dfc63e

• ui: update function name

  Z4karia

  committed
  1c2a34a

  Copy full SHA for 1c2a34a

Commits on Oct 30, 2024

• Merge pull request #20 from blooo-io/fix/app-update-audit-fix

  Show description for 50b42c2
  Z4karia

  authored
  50b42c2

  Copy full SHA for 50b42c2

Commits on Nov 6, 2024

• fix: resolve possible out of bound issue

  keiff3r

  committed
  c3118e2

  Copy full SHA for c3118e2

• fix: patch potential integer underflow

  keiff3r

  committed
  cede993

  Copy full SHA for cede993

• fix: disable debuging

  keiff3r

  committed
  1f68a32

  Copy full SHA for 1f68a32

• fix: add a check before using variable

  keiff3r

  committed
  f958dd5

  Copy full SHA for f958dd5

• fix: handle weakness

  keiff3r

  committed
  7a10c09

  Copy full SHA for 7a10c09

Commits on Nov 7, 2024

• fix: add a condition in display_data_content_and_confirm

  keiff3r

  committed
  e3c24ae

  Copy full SHA for e3c24ae

• chore: bump version

  keiff3r

  committed
  e6b9553

  Copy full SHA for e6b9553

• fix: remove compilation warning

  keiff3r

  committed
  3443fb6

  Copy full SHA for 3443fb6

• fix: always include debug helpers header

  Show description for a7d8e22
  keiff3r

  committed
  a7d8e22

  Copy full SHA for a7d8e22

• test: generate golden snapshots

  keiff3r

  committed
  a71d92e

  Copy full SHA for a71d92e

• style: change copyright from Blooo to Acre

  Show description for 256eecc
  keiff3r

  committed
  256eecc

  Copy full SHA for 256eecc

• chore: update Makefile for debug configuration

  Show description for f560302
  keiff3r

  committed
  f560302

  Copy full SHA for f560302

• fix: added missing refs for debug tools

  n4l5u0r

  committed
  4a187a7

  Copy full SHA for 4a187a7

• style: change developer from Blooo to Acre

  Show description for 6b22bc5
  keiff3r

  committed
  6b22bc5

  Copy full SHA for 6b22bc5

• Merge pull request #21 from blooo-io/fix/address-ledger-audit-vuln

  Show description for cf8f68c
  keiff3r

  authored
  cf8f68c

  Copy full SHA for cf8f68c

Commits on Nov 9, 2024

• fix: applied similar derivation path as bitcoin app to enable fingerprinting methods on real devices.

  n4l5u0r

  committed
  f704e80

  Copy full SHA for f704e80

Commits on Nov 11, 2024

• Merge pull request #23 from blooo-io/fix/LDG-494--app-fix-fingerprint-problem

  n4l5u0r

  authored
  1f7273a

  Copy full SHA for 1f7273a

• fix:bump version

  n4l5u0r

  authored
  fe7d6a4

  Copy full SHA for fe7d6a4

• fix: adjusted snapshot

  n4l5u0r

  committed
  375fff4

  Copy full SHA for 375fff4

• fxi: aligned snapshots

  n4l5u0r

  committed
  a0b66f4

  Copy full SHA for a0b66f4

Commits on Nov 12, 2024

• Merge pull request #24 from blooo-io/fix/bump-version-1-1-3

  Show description for 67d9467
  n4l5u0r

  authored
  67d9467

  Copy full SHA for 67d9467

Commits on Nov 14, 2024

• fix: initialise DEBUG properly

  keiff3r

  committed
  b3d0952

  Copy full SHA for b3d0952

• fix(handler/withdraw): Correct compute_tx_hash 's implementation

  Show description for a28051a
  keiff3r

  committed
  a28051a

  Copy full SHA for a28051a

• chore: bump version

  keiff3r

  committed
  0ec4af6

  Copy full SHA for 0ec4af6

• fix: disable DEBUG in Makefile

  keiff3r

  committed
  7677568

  Copy full SHA for 7677568

• test: generate golden snapshots

  keiff3r

  committed
  5e69551

  Copy full SHA for 5e69551

• fix: correct expected signature

  keiff3r

  committed
  3b072b1

  Copy full SHA for 3b072b1

• Merge pull request #25 from blooo-io/fix/LDG-493--app-fix-withdrawal-signing

  Show description for 07dc817
  keiff3r

  authored
  07dc817

  Copy full SHA for 07dc817