Skip to content

Commit

Permalink
Update modules/4337/contracts/Safe4337Module.sol
Browse files Browse the repository at this point in the history
Co-authored-by: Nicholas Rodrigues Lordello <nick@safe.global>
  • Loading branch information
akshay-ap and nlordell authored Aug 8, 2024
1 parent f7f1214 commit cb79059
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion modules/4337/contracts/Safe4337Module.sol
Original file line number Diff line number Diff line change
Expand Up @@ -224,7 +224,7 @@ contract Safe4337Module is IAccount, HandlerContext, CompatibilityFallbackHandle
* However, there is an edge case that `_checkSignaturesLength` function cannot detect.
* Since the `signature` field in UserOp is not part of the UserOp hash a malicious bundler can manipulate the
* field(s) storing the signature length and pad additional bytes to the dynamic part of the signatures which will
* make `_checkSignaturesLength` to return true. In such cases, it is the responsibility of the signature verifier
* make `_checkSignaturesLength` to return true. In such cases, it is the responsibility of the Safe signature validator
* (which can be a Safe or any other contract) that supports ERC-1271 and is the owner of the Safe to check for
* additional padded bytes to the signatures data.
* @param signatures Signatures data.
Expand Down

0 comments on commit cb79059

Please sign in to comment.