From 573c343d54105db2510cbfea1a41ec91c17c6139 Mon Sep 17 00:00:00 2001 From: Manav Darji Date: Thu, 30 Jan 2025 18:41:32 +0530 Subject: [PATCH 1/2] crypto: add IsOnCurve check --- crypto/crypto.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/crypto/crypto.go b/crypto/crypto.go index cce7a5ebe5..9302c96fab 100644 --- a/crypto/crypto.go +++ b/crypto/crypto.go @@ -189,6 +189,9 @@ func UnmarshalPubkey(pub []byte) (*ecdsa.PublicKey, error) { if x == nil { return nil, errInvalidPubkey } + if !S256().IsOnCurve(x, y) { + return nil, errInvalidPubkey + } return &ecdsa.PublicKey{Curve: S256(), X: x, Y: y}, nil } From 983b715f08dcfb386bf7739c6aee09cedf0acd1c Mon Sep 17 00:00:00 2001 From: Manav Darji Date: Thu, 30 Jan 2025 18:43:00 +0530 Subject: [PATCH 2/2] params: bump version to v1.5.5 --- params/version.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/params/version.go b/params/version.go index 03cd330b7d..c139179f0f 100644 --- a/params/version.go +++ b/params/version.go @@ -23,7 +23,7 @@ import ( const ( VersionMajor = 1 // Major version component of the current release VersionMinor = 5 // Minor version component of the current release - VersionPatch = 4 // Patch version component of the current release + VersionPatch = 5 // Patch version component of the current release VersionMeta = "" // Version metadata to append to the version string )