anastasis

commit ff5fd849b7a209b12c384691ed193b4e703ed59c
parent 41076924349fb315340a9aaadf02d7baabab004b
Author: Christian Grothoff <christian@grothoff.org>
Date:   Wed, 29 Jul 2026 13:08:05 +0200

iban helper: ignore transfers from non-IBAN accounts

Diffstat:
M
src/authorization/anastasis-helper-authorization-iban.c
 | 
9
+++++++++

1 file changed, 9 insertions(+), 0 deletions(-)
diff --git a/src/authorization/anastasis-helper-authorization-iban.c b/src/authorization/anastasis-helper-authorization-iban.c
@@ -159,6 +159,15 @@ notify (const char *sender_account_uri,
   char *iban;
 
   iban = payto_get_iban (sender_account_uri);
+  if (NULL == iban)
+  {
+    /* The bank facade is only semi-trusted; a non-IBAN debit account (or a
+       malformed payto URI) must not crash the helper via strlen(NULL). */
+    GNUNET_log (GNUNET_ERROR_TYPE_WARNING,
+                "Ignoring transfer from non-IBAN account `%s'\n",
+                sender_account_uri);
+    return;
+  }
   GNUNET_log (GNUNET_ERROR_TYPE_INFO,
               "Generating events for code %llu from %s\n",
               (unsigned long long) code,