Possible nil dereference in key generation

multisig-labs / multi-party-sig

Implementation of protocols for threshold signatures

Apache License 2.0

4 stars 2 forks source link

Possible nil dereference in key generation #1

Closed 0xJohnnyGault closed 2 years ago

0xJohnnyGault commented 2 years ago

Audit: KS-SBCF-F-04

Location: protocols/cmp/keygen/round3.go:60

Description

The method StoreBroadcastMessage checks that every parameter in the broadcast3 structure is not nil, however, the body.SchnorrCommitments parameter is not validated. If this parameter is set to nil, the code panics.