Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Ledger Vulnerabilities #2

Merged
merged 35 commits into from
Nov 20, 2024
Merged

Conversation

n4l5u0r
Copy link

@n4l5u0r n4l5u0r commented Nov 18, 2024

No description provided.

Z4karia and others added 30 commits October 28, 2024 17:23
- Move debug-helpers/debug.h inclusion out of DEBUG=1 condition
- Keep -g flag only for debug builds
- change 'Blooo' to 'Acre'
- generate golden snapshots
- Remove inclusion of debug-helpers/debug.h from default CFLAGS.
- Add inclusion of debug-helpers/debug.h to CFLAGS only when DEBUG=1.
- Ensure CFLAGS includes -g for debugging when DEBUG=1.
- change "Blooo" to "Acre"
- generate golden snapshots
Fix: address Ledger's audit vulnerabilities
- Replace hardcoded `domain_separator_hash` with `abi_encoded_chain_id` for mainnet and testnet variants.
- Add `domain_separator_typehash`.
- Add function `compute_domain_separator_hash`
- Update `compute_tx_hash` to include domain separator hash computation.
@n4l5u0r
Copy link
Author

n4l5u0r commented Nov 18, 2024

@tdejoigny-ledger I reopened this PR instead, the #1 one looks corrupted

@cedelavergne-ledger cedelavergne-ledger merged commit cebe71e into LedgerHQ:develop Nov 20, 2024
60 of 63 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants