fix: Honor CALLDATA_FLAG_ADDR_FILTER for the EIP-712 calldata spender
The signed calldata-info filter payload allows the spender to be provided dynamically (CALLDATA_FLAG_ADDR_FILTER), the same way the callee already supports. The accept-path switch on spender_flag handled CALLDATA_FLAG_ADDR_VERIFYING_CONTRACT and CALLDATA_FLAG_ADDR_NONE explicitly but fell into the default branch for CALLDATA_FLAG_ADDR_FILTER, leaving calldata_info->spender_state at its calloc-zero value (CALLDATA_INFO_PARAM_NONE). The downstream filter-ingestion check requires spender_state == PARAM_UNSET, so a matching filter would be rejected and the spender screen never populated. Add the missing case: set spender_state to PARAM_UNSET to mirror the callee_flag handling so a follow-up filter can populate the value. (cherry picked from commit 1da86c5bdee7f280fbe8909fa154dde470ff3c29)
C
Charles-Edouard de la Vergne committed
3b5cf1de8456404693bdd5ff44f5132e6d8faa91
Parent: e9e4db9
Committed by Alexandre Paillier <alexandre.paillier@ledger.fr>
on 8/25/2026, 3:03:59 PM