fix(dpp): bound untrusted length prefixes on the proof-verification decode path - #4629

Merged

QuantumExplorer merged 3 commits into

fix/dpp-bound-untrusted-length-reads

Sep 8, 2026

Commits on Sep 8, 2026

fix(dpp): bound length-prefixed document field reads before allocating
PastaPastaPasta
committed
49be72d
fix(dpp): enforce a byte budget when decoding stored asset lock values
PastaPastaPasta
committed
29b357d
fix(dpp): enforce a byte budget when decoding stored group actions
PastaPastaPasta
committed
5fa2964