fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic offsets and can spoof the review UI #2393
cedelavergne-ledgerbuild_and_functional_tests.yml
on: pull_request
Build application using the reusable workflow
/
...
/
Retrieve application metadata
14s
Build Clone app using the reusable workflow
/
...
/
Retrieve application metadata
12s
Build Memory application using the reusable workflow
/
...
/
Retrieve application metadata
16s
Matrix: Build application using the reusable workflow / Build application for all selected devices
Matrix: Build application using the reusable workflow / Build target branch sources for all selected devices
Matrix: Build Clone app using the reusable workflow / Build application for all selected devices
Matrix: Build Clone app using the reusable workflow / Build target branch sources for all selected devices
Matrix: Build Memory application using the reusable workflow / Build application for all selected devices
Matrix: Build Memory application using the reusable workflow / Build target branch sources for all selected devices
Build application using the reusable workflow
/
Merge build artifacts
5s
Build application using the reusable workflow
/
Merge build artifacts (target branch)
4s
Build Clone app using the reusable workflow
/
Merge build artifacts
5s
Build Clone app using the reusable workflow
/
Merge build artifacts (target branch)
0s
Build Memory application using the reusable workflow
/
Merge build artifacts
3s
Build Memory application using the reusable workflow
/
Merge build artifacts (target branch)
0s
Build application using the reusable workflow
/
Report ELF section sizes and post PR comment
13s
Build Clone app using the reusable workflow
/
Report ELF section sizes and post PR comment
0s
Build Memory application using the reusable workflow
/
Report ELF section sizes and post PR comment
0s
Run Memory tests using the reusable workflow
/
...
/
Retrieve application metadata
14s
Run ragger tests using the reusable workflow
/
...
/
Retrieve application metadata
16s
Run Memory tests using the reusable workflow
/
...
/
Retrieve tests metadata
24s
Run ragger tests using the reusable workflow
/
...
/
Retrieve tests metadata
14s
Run ragger Clone tests using the reusable workflow
/
...
/
Retrieve application metadata
14s
Run ragger Clone tests using the reusable workflow
/
...
/
Retrieve tests metadata
15s
Matrix: Run Memory tests using the reusable workflow / Functional tests with Ragger
Matrix: Run ragger tests using the reusable workflow / Functional tests with Ragger
Matrix: Run ragger Clone tests using the reusable workflow / Functional tests with Ragger
Run Memory tests using the reusable workflow
/
Post stack consumption summary on PR
0s
Run Memory tests using the reusable workflow
/
Merge pytest logs
7s
Run Memory tests using the reusable workflow
/
Merge snapshots artifacts
2s
Run ragger tests using the reusable workflow
/
Merge snapshots artifacts
3s
Run ragger tests using the reusable workflow
/
Post stack consumption summary on PR
13s
Run ragger tests using the reusable workflow
/
Merge pytest logs
0s
Run ragger Clone tests using the reusable workflow
/
Merge snapshots artifacts
2s
Run ragger Clone tests using the reusable workflow
/
Post stack consumption summary on PR
14s
Run ragger Clone tests using the reusable workflow
/
Merge pytest logs
Run Memory tests using the reusable workflow
/
...
/
Commit new snapshots
Run ragger tests using the reusable workflow
/
...
/
Commit new snapshots
Run ragger Clone tests using the reusable workflow
/
...
/
Commit new snapshots
Process pytest logs
6s
Annotations
7 warnings
|
Build Memory application using the reusable workflow / Merge build artifacts
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact/merge@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build application using the reusable workflow / Merge build artifacts (target branch)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact/merge@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build Clone app using the reusable workflow / Merge build artifacts
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact/merge@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build application using the reusable workflow / Merge build artifacts
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact/merge@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build application using the reusable workflow / Report ELF section sizes and post PR comment
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@v7. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Run ragger Clone tests using the reusable workflow / Post stack consumption summary on PR
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@v7. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Run ragger tests using the reusable workflow / Post stack consumption summary on PR
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@v7. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
clone_app_stack_consumption-apex_p
|
274 Bytes |
sha256:2302829935b86306fb41f3176c8ad71baaaa8d59840007582258cd8047286f09
|
|
|
clone_app_stack_consumption-flex
|
272 Bytes |
sha256:9fe4943378cc0cec9943f7009aac641a7121cd4a146870fa2961d033bcae050f
|
|
|
clone_app_stack_consumption-nanosp
|
274 Bytes |
sha256:87483ed6ebf91aadd04fdd0acdabd704ec9a3b0f63a9941c98ae429fadff0419
|
|
|
clone_app_stack_consumption-nanox
|
274 Bytes |
sha256:086dab6256b2a12a785a8702ace8e5d8cd2d985845323ac63926cbc6cf856156
|
|
|
clone_app_stack_consumption-stax
|
271 Bytes |
sha256:f09bb03eb88931e278996d7ffcc99c997ee690877df9c6ec935075980b403e15
|
|
|
clone_elfs
|
69.3 KB |
sha256:1791290cf30369ded1dda1777aa896a3e2cf5239bf2e20a4311f66ed90c1d497
|
|
|
memory_elfs
|
532 KB |
sha256:cd43dc5d47f7d51ae852a2248ea9714d7c7498bc91d118b656b72020f926fb65
|
|
|
pytest-logs-combined
|
419 KB |
sha256:94335043985047c5c7949bca28ba53b16e708237a1f169ed8de7f0b4465fd3aa
|
|
|
pytest-logs-nanox
|
419 KB |
sha256:5e82629dcf36a664d268d1a82f50997e57c27b0c653040c950d200b3880f3662
|
|
|
ragger_elfs
|
1.96 MB |
sha256:1cd70d6eb1009ee0ae16aa44f74a27ddebaa974af1148628db0cb60efa3740f9
|
|
|
ragger_elfs_target
|
1.96 MB |
sha256:df6cfc2995a75daf81cd68421670623fccec6624a50cdb6b92e1ab03ad10556c
|
|
|
stack-consumption-summary-apex_p
|
2.26 KB |
sha256:25c873caf000e409767016b41e4fd4c3b4f8e93c52bbf2d909d9f760ee24bef9
|
|
|
stack-consumption-summary-flex
|
2.22 KB |
sha256:47746f485a9cf0ed89ef267ba643c02a2d144c1185621c0484600898dd53b97b
|
|
|
stack-consumption-summary-nanosp
|
2.15 KB |
sha256:88c7db69610cd024e66fa1bbfdd7d98319aab68e324ffffb5af97ce2cc9a9707
|
|
|
stack-consumption-summary-nanox
|
2.13 KB |
sha256:a682ccd332d71637a592dbde243b2e4e88e8a5b397a62deedf496eda3acd1956
|
|
|
stack-consumption-summary-stax
|
2.22 KB |
sha256:aaeecc57e299f95a0d29f510410104355f1fd79f83b9aa54dc1d9a5a2650340f
|
|