SIGN IN SIGN UP

fix: Honor CALLDATA_FLAG_ADDR_FILTER for the EIP-712 calldata spender

The signed calldata-info filter payload allows the spender to be
provided dynamically (CALLDATA_FLAG_ADDR_FILTER), the same way the
callee already supports. The accept-path switch on spender_flag
handled CALLDATA_FLAG_ADDR_VERIFYING_CONTRACT and
CALLDATA_FLAG_ADDR_NONE explicitly but fell into the default branch
for CALLDATA_FLAG_ADDR_FILTER, leaving calldata_info->spender_state
at its calloc-zero value (CALLDATA_INFO_PARAM_NONE). The downstream
filter-ingestion check requires spender_state == PARAM_UNSET, so a
matching filter would be rejected and the spender screen never
populated.

Add the missing case: set spender_state to PARAM_UNSET to mirror the
callee_flag handling so a follow-up filter can populate the value.

(cherry picked from commit 1da86c5bdee7f280fbe8909fa154dde470ff3c29)
C
Charles-Edouard de la Vergne committed
3b5cf1de8456404693bdd5ff44f5132e6d8faa91
Parent: e9e4db9
Committed by Alexandre Paillier <alexandre.paillier@ledger.fr> on 8/25/2026, 3:03:59 PM