Skip to content

fix: consume subject public key wrappers - #71

Merged
leopoldjoy merged 3 commits into
mainfrom
audit/consume-spki-wrappers
Jul 31, 2026
Merged

fix: consume subject public key wrappers#71
leopoldjoy merged 3 commits into
mainfrom
audit/consume-spki-wrappers

Conversation

@leopoldjoy

Copy link
Copy Markdown
Contributor

Summary

  • require AlgorithmIdentifier children to consume their wrapper exactly
  • require SubjectPublicKeyInfo children to consume their wrapper exactly
  • add trailing-field regressions for both wrappers

Audit finding

Addresses external finding #16.

Tests

  • forge fmt --check
  • forge test --match-path test/CertManager.t.sol (40 passed, 1 skipped)

Size note

The isolated parser fix compiles and tests successfully, but production CertManager is 24,622 bytes, 46 bytes over EIP-170. This PR is intentionally isolated for review and requires bytecode reclamation before merge.

Co-authored-by: OpenCode <opencode-noreply@coinbase.com>
@leopoldjoy
leopoldjoy marked this pull request as ready for review July 27, 2026 13:41
awilliams1-cb
awilliams1-cb previously approved these changes Jul 30, 2026
…appers

Co-authored-by: OpenCode <opencode-noreply@coinbase.com>

# Conflicts:
#	src/CertManager.sol
@leopoldjoy
leopoldjoy merged commit 7aacef0 into main Jul 31, 2026
8 checks passed
@leopoldjoy
leopoldjoy deleted the audit/consume-spki-wrappers branch July 31, 2026 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants