From e87a214a446513917adcfc150e4c62efb7e08f74 Mon Sep 17 00:00:00 2001
From: BZO95 <deffie.jnkiee@gmail.com>
Date: Wed, 14 Jan 2026 20:16:15 +0800
Subject: [PATCH] accounts/scwallet: fix panic in decryptAPDU

---
 accounts/scwallet/securechannel.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/accounts/scwallet/securechannel.go b/accounts/scwallet/securechannel.go
index b3a7be8df0..1e0230dc45 100644
--- a/accounts/scwallet/securechannel.go
+++ b/accounts/scwallet/securechannel.go
@@ -300,6 +300,10 @@ func (s *SecureChannelSession) decryptAPDU(data []byte) ([]byte, error) {
 		return nil, err
 	}
 
+	if len(data) == 0 || len(data)%aes.BlockSize != 0 {
+		return nil, fmt.Errorf("invalid ciphertext length: %d", len(data))
+	}
+
 	ret := make([]byte, len(data))
 
 	crypter := cipher.NewCBCDecrypter(a, s.iv)