forked from keepkey/keepkey-firmware
-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
passphrase_protect() leaves the plaintext passphrase on the stack, unzeroed and outside CONFIDENTIAL
securitySecurity-relevant defect or hardeningSecurity-relevant defect or hardeningStatus: Open.transformERC20 clear-signs up to 860 bytes of transformations[] that the decoder never reads
evmEthereum / EVM signingEthereum / EVM signingsecuritySecurity-relevant defect or hardeningSecurity-relevant defect or hardeningStatus: Open.lint-format's 3-minute timeout + apt.llvm.org install silently skips the entire build and test graph
bugSomething isn't workingSomething isn't workingStatus: Open.PRs targeting release/** get no pull_request CI, so a release PR is never tested against its merge result
bugSomething isn't workingSomething isn't workingStatus: Open.FW_VERSION detection uses grep -oP, which BusyBox lacks, so it always falls back to 7.14.0
bugSomething isn't workingSomething isn't workingStatus: Open.python-integration-tests deadlocks: this release adds confirm screens the pinned tests never ack
bugSomething isn't workingSomething isn't workingStatus: Open.Audit every confirm body that receives a protobuf bytes field through %s
securitySecurity-relevant defect or hardeningSecurity-relevant defect or hardeningStatus: Open.layout_address() drops the QR silently when encoding fails or overflows version 9
securitySecurity-relevant defect or hardeningSecurity-relevant defect or hardeningStatus: Open.ETH fee sanity bound reads an unused gas_price
evmEthereum / EVM signingEthereum / EVM signingsecuritySecurity-relevant defect or hardeningSecurity-relevant defect or hardeningStatus: Open.Solana signer check is skipped on account overflow
securitySecurity-relevant defect or hardeningSecurity-relevant defect or hardeningStatus: Open.Solana parse/sign buffer offset mismatch
securitySecurity-relevant defect or hardeningSecurity-relevant defect or hardeningStatus: Open.fsm derived node static is retained past device lock
securitySecurity-relevant defect or hardeningSecurity-relevant defect or hardeningStatus: Open.