fix: reject off-curve owners during ATA creation

2021-04-29 19:57:26 -06:00 · 2021-04-29 19:57:26 -06:00 · 7320cf404b
parent 975b524487
commit 7320cf404b
1 changed files with 3 additions and 0 deletions
--- a/token/js/client/token.js
+++ b/token/js/client/token.js
@ -2239,6 +2239,9 @@ export class Token {
    mint: PublicKey,
    owner: PublicKey,
  ): Promise<PublicKey> {
+    if (!PublicKey.isOnCurve(owner.toBuffer())) {
+      throw new Error(`Owner cannot sign: ${owner.toString()}`);
+    }
    return (
      await PublicKey.findProgramAddress(
        [owner.toBuffer(), programId.toBuffer(), mint.toBuffer()],