Address bug in parse_aggregate_public_key by verifying data len is 32

Signed-off-by: Jacinta Ferrant <[email protected]>
ASuciuX · Oct 27, 2023 · 2ba5647 · 2ba5647
1 parent 2be0b03
commit 2ba5647
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/stacks-signer/src/stacks_client.rs b/stacks-signer/src/stacks_client.rs
@@ -256,6 +256,9 @@ impl StacksClient {
             if let Some(ClarityValue::Sequence(SequenceData::Buffer(public_key))) =
                 optional_data.data.map(|boxed| *boxed)
             {
+                if public_key.data.len() != 32 {
+                    return Err(ClientError::MalformedClarityValue(public_key_clarity_value));
+                }
                 let mut bytes = [0_u8; 32];
                 bytes.copy_from_slice(&public_key.data);
                 Ok(Some(Point::from(Scalar::from(bytes))))