From cc52a213c515b62b0914114b83aa3c34fbda0ac4 Mon Sep 17 00:00:00 2001 From: selsta Date: Tue, 21 Jul 2026 17:27:25 +0200 Subject: [PATCH] serialization: validate RingCT prunable JSON type (cherry picked from commit fe2e0dbc59626b737301e843ca31840adf87e9d4) --- src/serialization/json_object.cpp | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/serialization/json_object.cpp b/src/serialization/json_object.cpp index 64a74326c..e35ccb4c7 100644 --- a/src/serialization/json_object.cpp +++ b/src/serialization/json_object.cpp @@ -1179,6 +1179,11 @@ void fromJsonValue(const rapidjson::Value& val, rct::rctSig& sig) const auto prunable = val.FindMember("prunable"); if (prunable != val.MemberEnd()) { + if (!prunable->value.IsObject()) + { + throw WRONG_TYPE("json object"); + } + rct::keyV pseudo_outs = std::move(sig.get_pseudo_outs()); GET_FROM_JSON_OBJECT(prunable->value, sig.p.rangeSigs, range_proofs);