Fix - Direct mapping CPI caller privilege escalation after ownership transfer#6709

Merged

Lichtso merged 3 commits into

anza-xyz:masterfrom

Lichtso:fix/direct_mapping_must_update_caller_when_ownership_changes

Jun 28, 2025

Commits on Jun 25, 2025

Demonstrate the issue by giving a no-op callee a readonly instruction account instead of a writable one.
Lichtso
committed
Fixes the issue by updating the MemoryRegion of the caller if it changed the owner at the CPI call edge.
Lichtso
committed
Feature gates the change.
Lichtso
committed