Skip to content

fix: bound leaf certificate length#64

Draft
leopoldjoy wants to merge 1 commit into
mainfrom
audit/bound-leaf-cert-length
Draft

fix: bound leaf certificate length#64
leopoldjoy wants to merge 1 commit into
mainfrom
audit/bound-leaf-cert-length

Conversation

@leopoldjoy

Copy link
Copy Markdown
Contributor

Summary

  • enforce AWS’s 1..1024-byte bound on the attestation leaf certificate before slicing
  • add regressions for absent, empty, and oversized leaf certificates

Audit finding

Addresses external finding #4.

Tests

  • forge fmt --check
  • forge test --match-test "test_LeafCertificate" (3 passed)
  • forge build --sizes
  • NitroValidator runtime: 17,420 bytes

Co-authored-by: OpenCode <opencode-noreply@coinbase.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant