From 54ce6f2cec94fe07635b0c18e04819bff6d9e3ac Mon Sep 17 00:00:00 2001 From: Roman Zeyde Date: Tue, 6 Mar 2018 10:06:00 +0200 Subject: [PATCH] trezor: limit passphrase length --- libagent/device/trezor.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libagent/device/trezor.py b/libagent/device/trezor.py index c5a5906..908fe9c 100644 --- a/libagent/device/trezor.py +++ b/libagent/device/trezor.py @@ -90,6 +90,11 @@ class Trezor(interface.Device): passphrase = mnemonic.Mnemonic.normalize_string(passphrase) ack = self._defs.PassphraseAck(passphrase=passphrase) + length = len(ack.passphrase) + if length > 50: + msg = 'Too long passphrase ({} chars)'.format(length) + raise ValueError(msg) + self.__class__.cached_passphrase_ack = ack return ack except: # noqa