Jorge Martins ead85a0aaa Add funcs to avoid tricking user when using plugin ...

Usually the length of an array is sent in a parameter.
Most of the times the developer simply uses U2BE/U4BE to get this length. It
is possible to forge a tx with a `length > sizeof(uint16_t/uint32_t)` and trick the
user into signing something different from what is shown.

For instance consider the following parameter:
00 ... 01 00 00 00 01

if the developer uses U2BE/U4BE, it is possible that this length is shown to the user
and if it is, the user will see the length as 1.

2022-11-08 09:44:37 +01:00

5.8 KiB

Executable File

Raw Blame History

View Raw