Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix Ledger Vulnerabilities #2

Merged
merged 35 commits into from
Nov 20, 2024
Merged

Fix Ledger Vulnerabilities #2

merged 35 commits into from
Nov 20, 2024

Commits on Oct 28, 2024

  1. fix: app update audit fix

    @Z4karia
    Z4karia committed Oct 28, 2024
    Configuration menu
    Copy the full SHA
    cd1ff73 View commit details
    Browse the repository at this point in the history

  2. bump version

    @Z4karia
    Z4karia committed Oct 28, 2024
    Configuration menu
    Copy the full SHA
    4758913 View commit details
    Browse the repository at this point in the history

Commits on Oct 29, 2024

  1. Merge pull request #19 from blooo-io/fix/app-update-audit-fix 

    fix: app update audit fix
    @Z4karia
    Z4karia authored Oct 29, 2024
    Configuration menu
    Copy the full SHA
    980875b View commit details
    Browse the repository at this point in the history

  2. ui: update function name

    @Z4karia
    Z4karia committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    a8126c8 View commit details
    Browse the repository at this point in the history

  3. update credits

    @Z4karia
    Z4karia committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    3dfc63e View commit details
    Browse the repository at this point in the history

  4. ui: update function name

    @Z4karia
    Z4karia committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    1c2a34a View commit details
    Browse the repository at this point in the history

Commits on Oct 30, 2024

  1. Merge pull request #20 from blooo-io/fix/app-update-audit-fix 

    UI Update: function name
    @Z4karia
    Z4karia authored Oct 30, 2024
    Configuration menu
    Copy the full SHA
    50b42c2 View commit details
    Browse the repository at this point in the history

Commits on Nov 6, 2024

  1. fix: resolve possible out of bound issue

    @keiff3r
    keiff3r committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    c3118e2 View commit details
    Browse the repository at this point in the history

  2. fix: patch potential integer underflow

    @keiff3r
    keiff3r committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    cede993 View commit details
    Browse the repository at this point in the history

  3. fix: disable debuging

    @keiff3r
    keiff3r committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    1f68a32 View commit details
    Browse the repository at this point in the history

  4. fix: add a check before using variable

    @keiff3r
    keiff3r committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    f958dd5 View commit details
    Browse the repository at this point in the history

  5. fix: handle weakness

    @keiff3r
    keiff3r committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    7a10c09 View commit details
    Browse the repository at this point in the history

Commits on Nov 7, 2024

  1. fix: add a condition in display_data_content_and_confirm

    @keiff3r
    keiff3r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    e3c24ae View commit details
    Browse the repository at this point in the history

  2. chore: bump version

    @keiff3r
    keiff3r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    e6b9553 View commit details
    Browse the repository at this point in the history

  3. fix: remove compilation warning

    @keiff3r
    keiff3r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    3443fb6 View commit details
    Browse the repository at this point in the history

  4. fix: always include debug helpers header 

    - Move debug-helpers/debug.h inclusion out of DEBUG=1 condition
- Keep -g flag only for debug builds
    @keiff3r
    keiff3r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    a7d8e22 View commit details
    Browse the repository at this point in the history

  5. test: generate golden snapshots

    @keiff3r
    keiff3r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    a71d92e View commit details
    Browse the repository at this point in the history

  6. style: change copyright from Blooo to Acre 

    - change 'Blooo' to 'Acre'
- generate golden snapshots
    @keiff3r
    keiff3r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    256eecc View commit details
    Browse the repository at this point in the history

  7. chore: update Makefile for debug configuration 

    - Remove inclusion of debug-helpers/debug.h from default CFLAGS.
- Add inclusion of debug-helpers/debug.h to CFLAGS only when DEBUG=1.
- Ensure CFLAGS includes -g for debugging when DEBUG=1.
    @keiff3r
    keiff3r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    f560302 View commit details
    Browse the repository at this point in the history

  8. fix: added missing refs for debug tools

    @n4l5u0r
    n4l5u0r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    4a187a7 View commit details
    Browse the repository at this point in the history

  9. style: change developer from Blooo to Acre 

    - change "Blooo" to "Acre"
- generate golden snapshots
    @keiff3r
    keiff3r committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    6b22bc5 View commit details
    Browse the repository at this point in the history

  10. Merge pull request #21 from blooo-io/fix/address-ledger-audit-vuln 

    Fix: address Ledger's audit vulnerabilities
    @keiff3r
    keiff3r authored Nov 7, 2024
    Configuration menu
    Copy the full SHA
    cf8f68c View commit details
    Browse the repository at this point in the history

Commits on Nov 9, 2024

  1. fix: applied similar derivation path as bitcoin app to enable fingerp… 

    …rinting methods on real devices.
    @n4l5u0r
    n4l5u0r committed Nov 9, 2024
    Configuration menu
    Copy the full SHA
    f704e80 View commit details
    Browse the repository at this point in the history

Commits on Nov 11, 2024

  1. Merge pull request #23 from blooo-io/fix/LDG-494--app-fix-fingerprint… 

    …-problem
    @n4l5u0r
    n4l5u0r authored Nov 11, 2024
    Configuration menu
    Copy the full SHA
    1f7273a View commit details
    Browse the repository at this point in the history

  2. fix:bump version

    @n4l5u0r
    n4l5u0r authored Nov 11, 2024
    Configuration menu
    Copy the full SHA
    fe7d6a4 View commit details
    Browse the repository at this point in the history

  3. fix: adjusted snapshot

    @n4l5u0r
    n4l5u0r committed Nov 11, 2024
    Configuration menu
    Copy the full SHA
    375fff4 View commit details
    Browse the repository at this point in the history

  4. fxi: aligned snapshots

    @n4l5u0r
    n4l5u0r committed Nov 11, 2024
    Configuration menu
    Copy the full SHA
    a0b66f4 View commit details
    Browse the repository at this point in the history

Commits on Nov 12, 2024

  1. Merge pull request #24 from blooo-io/fix/bump-version-1-1-3 

    fix:bump version
    @n4l5u0r
    n4l5u0r authored Nov 12, 2024
    Configuration menu
    Copy the full SHA
    67d9467 View commit details
    Browse the repository at this point in the history

Commits on Nov 14, 2024

  1. fix: initialise DEBUG properly

    @keiff3r
    keiff3r committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    b3d0952 View commit details
    Browse the repository at this point in the history

  2. fix(handler/withdraw): Correct compute_tx_hash 's implementation 

    - Replace hardcoded `domain_separator_hash` with `abi_encoded_chain_id` for mainnet and testnet variants.
- Add `domain_separator_typehash`.
- Add function `compute_domain_separator_hash`
- Update `compute_tx_hash` to include domain separator hash computation.
    @keiff3r
    keiff3r committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    a28051a View commit details
    Browse the repository at this point in the history

  3. chore: bump version

    @keiff3r
    keiff3r committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    0ec4af6 View commit details
    Browse the repository at this point in the history

  4. fix: disable DEBUG in Makefile

    @keiff3r
    keiff3r committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    7677568 View commit details
    Browse the repository at this point in the history

  5. test: generate golden snapshots

    @keiff3r
    keiff3r committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    5e69551 View commit details
    Browse the repository at this point in the history

  6. fix: correct expected signature

    @keiff3r
    keiff3r committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    3b072b1 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #25 from blooo-io/fix/LDG-493--app-fix-withdrawal-… 

    …signing

fix(handler/withdraw): correct issue in `compute_tx_hash`
    @keiff3r
    keiff3r authored Nov 14, 2024
    Configuration menu
    Copy the full SHA
    07dc817 View commit details
    Browse the repository at this point in the history