Merge pull request #485 from ethereum-optimism/seb/upstream-p2p-fix

crypto: add IsOnCurve check (ethereum/go-ethereum#31100)
ethereum-optimism · Jan 30, 2025 · 0bc177c · 0bc177c
2 parents 7496603 + bd43e57
commit 0bc177c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/crypto/crypto.go b/crypto/crypto.go
@@ -178,6 +178,9 @@ func UnmarshalPubkey(pub []byte) (*ecdsa.PublicKey, error) {
 	if x == nil {
 		return nil, errInvalidPubkey
 	}
+	if !S256().IsOnCurve(x, y) {
+		return nil, errInvalidPubkey
+	}
 	return &ecdsa.PublicKey{Curve: S256(), X: x, Y: y}, nil
 }