COMMITS
August 27, 2026
A
Merge remote-tracking branch 'origin/master' into develop
Alexandre Paillier committed
August 25, 2026
A
Merge pull request #1106 from LedgerHQ/release/1.22.3
apaillier-ledger committed
A
Fix(plugin): add discriminant for pluginContext/contractAddress union
Alexandre Paillier committed
August 24, 2026
A
Bump patch version number & update the changelog
Alexandre Paillier committed
August 17, 2026
C
Fix(sign_message): reject P1_MORE after message already finalized
Charles-Edouard de la Vergne committed
August 14, 2026
C
Fix(eip712): remove redundant reset_app_context() from approve/reject
Charles-Edouard de la Vergne committed
C
Fix(eip712): pin hash display strings in signing context
Charles-Edouard de la Vergne committed
C
Fix(nbgl): zero pairs list header before freeing backing array
Charles-Edouard de la Vergne committed
C
Fix(network): guard cleanup against NULL g_last_added_network
Charles-Edouard de la Vergne committed
C
Fix(context): clear dataContext in reset_app_context()
Charles-Edouard de la Vergne committed
C
Fix wrong snapshots
Charles-Edouard de la Vergne committed
C
fix(eip712): address security findings
Charles-Edouard de la Vergne committed
C
fix(eip712): track PREPARING state and restrict ui_712_init bzero scope
Charles-Edouard de la Vergne committed
C
Fix return code type
Charles-Edouard de la Vergne committed
August 13, 2026
C
fix(tlv): enforce exact size in tlv_get_hash to prevent uninitialized stack reads
Charles-Edouard de la Vergne committed
June 10, 2026
C
May 25, 2026
C
fix: ERC20 swap flow accepts approve() as a valid transfer (#1038)
cerberus-production[bot] committed
May 22, 2026
C
fix: Standard swap flow can auto-sign unvalidated calldata when blind signing is enabled (#1036)
cerberus-production[bot] committed
May 13, 2026
C
fix: Zero ERC-20 plugin context and require both ABI fields before review
Charles-Edouard de la Vergne committed
C
fix: Strip uint256 zero padding before rendering EIP-712 datetime values
Charles-Edouard de la Vergne committed
C
fix: Lock EIP-712 type system at FILT_ACTIVATE to prevent post-hash schema injection
Charles-Edouard de la Vergne committed
C
fix: Cap PARAM_TYPE_GROUP nesting depth in the GCS formatter
Charles-Edouard de la Vergne committed
C
fix: Make rlp_decode_length() self-bounded with an explicit bufferLength
Charles-Edouard de la Vergne committed
C
fix: Validate Exchange address_parameters before dereferencing
Charles-Edouard de la Vergne committed
C
fix: Reject empty plugin name in handle_set_external_plugin
Charles-Edouard de la Vergne committed
C
fix: Propagate hash_filtering_path() failures instead of swallowing them
Charles-Edouard de la Vergne committed
C
fix: Iterate the internal plugin table by length instead of a phantom sentinel
Charles-Edouard de la Vergne committed
C
fix: Reject oversize GCS constraint values instead of truncating
Charles-Edouard de la Vergne committed
C
fix: Make HAVE_CHALLENGE_NO_CHECK builds noisy at compile time
Charles-Edouard de la Vergne committed
C
fix: Size the GCS pairs allocation with the right element type
Charles-Edouard de la Vergne committed