Fix cerberus Medium#1028

Merged

cedelavergne-ledger merged 11 commits into

cev/fix_cerberus_medium

May 12, 2026

Commits on May 12, 2026

fix: TxAuth7702 silently maps missing chain_id to all-chains wildcard

cedelavergne-ledger
and
claude
committed
fix: Memory leak of g_tx_hash_ctx on aborted signing flows

cedelavergne-ledger
and
claude
committed
fix: Reject pre-EIP-155 legacy transactions to prevent cross-chain replay

cedelavergne-ledger
and
claude
committed
fix: Stale ticker reuse mislabels later entries in multi-value TOKEN fields

cedelavergne-ledger
and
claude
committed
fix: Apply MUST_BE / IF_NOT_IN constraints to RAW INT, BOOL, STRING fields

cedelavergne-ledger
and
claude
committed
fix: Require user confirmation for P2_SHARED_SECRET privacy export

cedelavergne-ledger
and
claude
committed
fix: Rotate challenge after Safe account descriptor processing

cedelavergne-ledger
and
claude
committed
fix: Bound EIP-712 path_update on recursive/cyclic custom types

cedelavergne-ledger
and
claude
committed
unit-test: Add INT/BOOL/STRING constraint cases for RAW parameter formatter
cedelavergne-ledger
committed
Add ragger tests for INT constraints
cedelavergne-ledger
committed
chore(client): convert bytearray to bytes at API boundaries for mypy
cedelavergne-ledger
committed