Skip to content

fix: guard empty ASN.1 bit strings#72

Draft
leopoldjoy wants to merge 1 commit into
mainfrom
audit/guard-empty-bit-string
Draft

fix: guard empty ASN.1 bit strings#72
leopoldjoy wants to merge 1 commit into
mainfrom
audit/guard-empty-bit-string

Conversation

@leopoldjoy

Copy link
Copy Markdown
Contributor

Summary

  • return InvalidAsn1Length for zero-length BIT STRING values
  • add regression coverage matching bitstringUintAt behavior

Audit finding

Addresses external finding #17.

Tests

  • forge fmt --check
  • forge test --match-path test/Asn1Decode.t.sol (36 passed)
  • forge build --sizes
  • Production CertManager runtime: 24,505 bytes, 71-byte margin

Co-authored-by: OpenCode <opencode-noreply@coinbase.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant