You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Polkadot Vault (iOS) silently crashes without error messages when processing deeply nested utility.batch call data. The application receives such data via QR code from Nova Spektr and attempts to decode it recursively. Due to the lack of recursion depth and size limits in the decoding logic, the call stack overflows, causing the app to terminate abruptly.
Description:
Polkadot Vault (iOS) silently crashes without error messages when processing deeply nested utility.batch call data. The application receives such data via QR code from Nova Spektr and attempts to decode it recursively. Due to the lack of recursion depth and size limits in the decoding logic, the call stack overflows, causing the app to terminate abruptly.
example call:
0x2800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800042800040a030068d56f15f85d3136970ec16946040bc1752654e906147f7e43e9d539d7c3de2f04
example case:
RPReplay_Final1766414420.mov