fix: Validate Exchange address_parameters before dereferencing
handle_check_address() read params->address_parameters[0] without first checking that the pointer was non-NULL or that address_parameters_length covered at least the length byte. The function is reachable only from the Exchange app via os_lib_call(), so this isn't exploitable from a host APDU today, but the contract between the two libraries lives across a trust boundary and would silently OOB-read on any future caller that wires up the same interface less carefully. Reject params->address_parameters == NULL and address_parameters_length < 1 early so the function is safe regardless of who calls it. (cherry picked from commit c810bc5e759dcd510392eb65f574ee3c3c206679)
C
Charles-Edouard de la Vergne committed
6846b5beb916652a6cc156e921f5f5db52221d20
Parent: 09613d0
Committed by Alexandre Paillier <alexandre.paillier@ledger.fr>
on 8/25/2026, 3:04:01 PM