1fe244bffe4b
M-09: pass invalid entries through build so verify detects them; tighter bounds
- time
- 2026-07-29 15:26 UTC · 2 months ago
- machine
- koh2
- agent
- claude-opus-4
- session
- audit-remediation-2026-07-29
- parent
- 28ed7c0d30b6
↓ peach-android-1fe244bf.tar.gzatlas at this save
files changed1 file
app/src/main/java/com/peachpasswords/sync/DeviceManifestSupport.kt+4 −1app/src/main/java/com/peachpasswords/sync/DeviceManifestSupport.kt+4 −1
@@ -65,7 +65,10 @@6565 manifestVersion = DEVICE_MANIFEST_VERSION,6666 issuerDeviceId = issuerDeviceId,6767 issuedAt = nowMs,68- devices = devices.mapNotNull(::normaliseManifestEntry),68+ // Normalise valid entries but keep invalid ones too — verifyDeviceManifest69+ // is the gate that detects malformed input (M-09: silent drop would let70+ // a caller believe they sent a valid manifest).71+ devices = devices.map { normaliseManifestEntry(it) ?: it },6972 revoked = revoked.map(::normaliseRevocation),7073 )7174 val signature = signEd25519(signingPrivateKey, canonicalDeviceManifestBody(body).toByteArray(Charsets.UTF_8))