Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[tsslib]Sigma audit feedback, MNT-09: Lack Of Signature Size Verification Checks #1129

Closed
abelliumnt opened this issue Jun 27, 2023 · 0 comments
Assignees

Comments

@abelliumnt
Copy link
Collaborator

Describe the bug
Multiple instances of lack of signature’s size verification before use have been identified:

Expected behavior
Implement additional checks on the signature length prior to taking a slice of the signature bytes or performing any indexing operations.

Screenshots
tss/ws/server/handler.go
image

tss/manager/sign.go
image

datalayr-mantle/common/contracts/utils.go
image

@abelliumnt abelliumnt self-assigned this Jun 27, 2023
@abelliumnt abelliumnt changed the title [tsslib]Sigma audit feedback: Lack Of Signature Size Verification Checks [tsslib]Sigma audit feedback, MNT-09: Lack Of Signature Size Verification Checks Jun 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant