Skip to content

LongTermOwnerWallet.RegisterRecipient was an unconditional no-op, bypassing recipient validation #1917#1918

Merged
adecaro merged 1 commit into
mainfrom
fix-LongTermOwnerWallet-RegisterRecipient-unconditional-no-op
Jul 15, 2026
Merged

LongTermOwnerWallet.RegisterRecipient was an unconditional no-op, bypassing recipient validation #1917#1918
adecaro merged 1 commit into
mainfrom
fix-LongTermOwnerWallet-RegisterRecipient-unconditional-no-op

Conversation

@adecaro

@adecaro adecaro commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Fix #1917

Description

  • Rejects nil data (wallet.ErrNilRecipientData).
  • Rejects data whose Identity doesn't match w.OwnerIdentity (reuses the existing w.Contains check).
  • Rejects data whose AuditInfo doesn't match w.OwnerAuditInfo.
  • Otherwise returns nil.

No registration/binding side effects are added (unlike AnonymousOwnerWallet.RegisterRecipient), since the wallet's identity is already resolved and bound at construction time in NewLongTermOwnerWallet — this method is purely a guard.

@adecaro adecaro self-assigned this Jul 15, 2026
@adecaro adecaro added the wallet label Jul 15, 2026
@adecaro adecaro added this to the Q3/26 milestone Jul 15, 2026
@adecaro adecaro force-pushed the fix-LongTermOwnerWallet-RegisterRecipient-unconditional-no-op branch from 8ed6bbe to e1ac101 Compare July 15, 2026 09:23
Signed-off-by: Angelo De Caro <adc@zurich.ibm.com>
@adecaro adecaro force-pushed the fix-LongTermOwnerWallet-RegisterRecipient-unconditional-no-op branch from e1ac101 to e39e663 Compare July 15, 2026 09:52

@AkramBitar AkramBitar left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@adecaro adecaro merged commit 9f5eac4 into main Jul 15, 2026
93 checks passed
@adecaro adecaro deleted the fix-LongTermOwnerWallet-RegisterRecipient-unconditional-no-op branch July 15, 2026 12:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

LongTermOwnerWallet.RegisterRecipient was an unconditional no-op, bypassing recipient validation

2 participants