LedgerHQ · bigspider · Oct 8, 2024 · Jul 16, 2024 · Jul 16, 2024 · Aug 6, 2024
diff --git a/.github/workflows/Dockerfile b/.github/workflows/Dockerfile
@@ -7,24 +7,22 @@
 RUN apt update -y && apt install -y git curl
 
 # install autotools bitcoin-core build dependencies
-RUN apt install -y automake autotools-dev bsdmainutils build-essential ccache git libboost-dev libboost-filesystem-dev libboost-system-dev libboost-test-dev libevent-dev libminiupnpc-dev libnatpmp-dev libqt5gui5 libqt5core5a libqt5dbus5 libsqlite3-dev libtool libzmq3-dev pkg-config python3 qttools5-dev qttools5-dev-tools qtwayland5 systemtap-sdt-dev
+RUN apt install -y bsdmainutils build-essential cmake pkg-config ccache git libboost-dev libboost-filesystem-dev libboost-system-dev libboost-test-dev libevent-dev libminiupnpc-dev libnatpmp-dev libqt5gui5 libqt5core5a libqt5dbus5 libsqlite3-dev libtool libzmq3-dev pkg-config python3 qttools5-dev qttools5-dev-tools qtwayland5 systemtap-sdt-dev
 
 # clone bitcoin-core from github and compile it
 RUN cd / && \
  git clone --depth=1 https://github.com/bitcoin/bitcoin.git && \
  cd bitcoin && \
- ./autogen.sh && \
- ./configure --enable-suppress-external-warnings && \
- make -j "$(($(nproc)+1))" && \
- mkdir bin && \
- cp src/bitcoind src/bitcoin-cli src/bitcoin-tx src/bitcoin-util src/bitcoin-wallet ./bin
+ cmake -B build && \
+ cmake --build build && \
+ cmake --install build
 
 
 FROM ghcr.io/ledgerhq/speculos:latest
-COPY --from=0 /bitcoin/bin /bitcoin/bin
+COPY --from=0 /usr/local/bin/ /usr/local/bin/
 
 # install runtime dependencies for bitcoind
 RUN apt update -y && apt install -y libminiupnpc-dev libminiupnpc-dev libnatpmp-dev libevent-dev libzmq3-dev
 
 # Add bitcoin binaries to path
-ENV PATH=/bitcoin/bin:$PATH
+ENV PATH=/usr/local/bin/:$PATH
diff --git a/.github/workflows/builder-image-workflow.yml b/.github/workflows/builder-image-workflow.yml
@@ -16,7 +16,7 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Build and push speculos-bitcoin to GitHub Packages
  uses: docker/build-push-action@v1

diff --git a/.github/workflows/ci-workflow.yml b/.github/workflows/ci-workflow.yml
@@ -34,21 +34,21 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Build
  run: |
  make DEBUG=0 COIN=bitcoin BOLOS_SDK=${{ matrix.SDK }} && mv bin/ bitcoin-bin/
  make clean
  make DEBUG=0 COIN=bitcoin_testnet BOLOS_SDK=${{ matrix.SDK }} && mv bin/ bitcoin-testnet-bin/
  - name: Upload Bitcoin app binary
- uses: actions/upload-artifact@v2
+ uses: actions/upload-artifact@v4
  with:
  name: bitcoin-app-${{ matrix.model }}
  path: bitcoin-bin
 
  - name: Upload Bitcoin Testnet app binary
- uses: actions/upload-artifact@v2
+ uses: actions/upload-artifact@v4
  with:
  name: bitcoin-testnet-app-${{ matrix.model }}
  path: bitcoin-testnet-bin
@@ -63,14 +63,14 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Build
  run: |
  make DEBUG=0 COIN=bitcoin_testnet BOLOS_SDK="$NANOSP_SDK" AUTOAPPROVE_FOR_PERF_TESTS=1
 
  - name: Upload Bitcoin Testnet app binary
- uses: actions/upload-artifact@v2
+ uses: actions/upload-artifact@v4
  with:
  name: bitcoin-testnet-perftest-app-nanosp
  path: bin
@@ -85,7 +85,7 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Build unit tests
  run: |
@@ -99,7 +99,7 @@ jobs:
  lcov --directory . -b "$(realpath build/)" --add-tracefile coverage.base --add-tracefile coverage.capture -o coverage.info && \
  lcov --directory . -b "$(realpath build/)" --remove coverage.info '*/unit-tests/*' -o coverage.info && \
  genhtml coverage.info -o coverage
- - uses: actions/upload-artifact@v2
+ - uses: actions/upload-artifact@v4
  with:
  name: code-coverage
  path: unit-tests/coverage
@@ -117,7 +117,7 @@ jobs:
  - name: HTML documentation
  run: doxygen .doxygen/Doxyfile
 
- - uses: actions/upload-artifact@v2
+ - uses: actions/upload-artifact@v4
  with:
  name: documentation
  path: doc/html
@@ -148,10 +148,10 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Download Bitcoin app binary
- uses: actions/download-artifact@v2
+ uses: actions/download-artifact@v4
  with:
  name: bitcoin-app-${{matrix.model}}
  path: bin
@@ -180,7 +180,7 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Run tests
  run: |
@@ -207,10 +207,10 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Download Bitcoin app binary for perftests
- uses: actions/download-artifact@v2
+ uses: actions/download-artifact@v4
  with:
  name: bitcoin-testnet-perftest-app-nanosp
  path: bin
@@ -221,7 +221,7 @@ jobs:
  pip install -r requirements.txt
  PYTHONPATH=$PYTHONPATH:/speculos pytest --headless --model=nanosp --benchmark-json=benchmarks.json
  - name: Upload benchmarks summary
- uses: actions/upload-artifact@v2
+ uses: actions/upload-artifact@v4
  with:
  name: benchmarks-log
  path: tests_perf/benchmarks.json
@@ -244,19 +244,19 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Install node
- uses: actions/setup-node@v2
+ uses: actions/setup-node@v4
  with:
- node-version: '16'
+ node-version: 20
 
  - name: Install yarn
  run: |
  npm install -g yarn
 
  - name: Download Bitcoin Testnet app binary
- uses: actions/download-artifact@v2
+ uses: actions/download-artifact@v4
  with:
  name: bitcoin-testnet-app-nanosp
  path: bin
@@ -278,7 +278,7 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
 
  - name: Run tests
  run: |

diff --git a/.github/workflows/codeql-workflow.yml b/.github/workflows/codeql-workflow.yml
@@ -28,7 +28,7 @@ jobs:
 
  steps:
  - name: Clone
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
 
  - name: Initialize CodeQL
  uses: github/codeql-action/init@v2

diff --git a/.github/workflows/lint-workflow.yml b/.github/workflows/lint-workflow.yml
@@ -1,28 +1,26 @@
-name: Code style check
+---
+ name: Code style check
 
-on:
- workflow_dispatch:
- push:
- branches:
- - master
- - develop
- pull_request:
- branches:
- - master
- - develop
+ # This workflow will run linting checks to ensure a level of uniformization among all Ledger applications.
+ #
+ # The presence of this workflow is mandatory as a minimal level of linting is required.
+ # You are however free to modify the content of the .clang-format file and thus the coding style of your application.
+ # We simply ask you to not diverge too much from the linting of the Boilerplate application.
 
-jobs:
- job_lint:
- name: Lint
- runs-on: ubuntu-latest
+ on:
+ workflow_dispatch:
+ push:
+ branches:
+ - master
+ - main
+ - develop
+ pull_request:
 
- steps:
- - name: Clone
- uses: actions/checkout@v2
-
- - name: Lint
- uses: DoozyX/clang-format-lint-action@v0.12
- with:
- source: './src'
- extensions: 'h,c'
- clangFormatVersion: 12
+ jobs:
+ check_linting:
+ name: Check linting using the reusable workflow
+ uses: LedgerHQ/ledger-app-workflows/.github/workflows/reusable_lint.yml@v1
+ with:
+ source: './src'
+ extensions: 'h,c'
+ version: 12
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
@@ -20,7 +20,7 @@ jobs:
  env:
  BUILD_WRAPPER_OUT_DIR: build_wrapper_output_directory # Directory where build-wrapper output will be placed
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v4
  with:
  # Disabling shallow clone is recommended for improving relevancy of reporting
  fetch-depth: 0

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 Dates are in `dd-mm-yyyy` format.
 
+## [2.3.0] - 26-08-2024
+
+### Added
+
+- Support for crosschain swap protocol.
+
+### Changed
+
+- Improvements in signing performance, especially for large transactions.
+
+### Fixed
+
+- `signMessage` would fail since version 2.2.2 for certain message lengths.
+
 ## [2.2.4] - 09-07-2024
 
 ### Changed

diff --git a/Makefile b/Makefile
@@ -46,8 +46,8 @@ PATH_SLIP21_APP_LOAD_PARAMS = "LEDGER-Wallet policy"
 
 # Application version
 APPVERSION_M = 2
-APPVERSION_N = 2
-APPVERSION_P = 4
+APPVERSION_N = 3
+APPVERSION_P = 0
 APPVERSION_SUFFIX = # if not empty, appended at the end. Do not add a dash.
 
 ifeq ($(APPVERSION_SUFFIX),)

diff --git a/bitcoin_client_js/babel.config.js b/bitcoin_client_js/babel.config.js
@@ -0,0 +1,9 @@
+module.exports = {
+ presets: [
+ ['@babel/preset-env', {
+ targets: {
+ node: 'current'
+ }
+ }]
+ ],
+};
diff --git a/bitcoin_client_js/jest.config.js b/bitcoin_client_js/jest.config.js
@@ -1,5 +1,11 @@
-/** @type {import('ts-jest/dist/types').InitialOptionsTsJest} */
 module.exports = {
  preset: 'ts-jest',
  testEnvironment: 'node',
-};
+ transform: {
+ '^.+\\.tsx?$': 'ts-jest',
+ '^.+\\.js$': 'babel-jest',
+ },
+ transformIgnorePatterns: [
+ "node_modules/(?!(axios)/)"
+ ]
+};
diff --git a/bitcoin_client_js/package.json b/bitcoin_client_js/package.json
@@ -36,12 +36,14 @@
  "bitcoinjs-lib": "^6.1.3"
  },
  "devDependencies": {
+ "@babel/preset-env": "^7.25.7",
  "@ledgerhq/hw-transport-node-speculos-http": "^6.24.1",
  "@ledgerhq/logs": "^6.10.0",
  "@types/jest": "^27.4.0",
  "@types/node": "^17.0.10",
  "@typescript-eslint/eslint-plugin": "^4.0.1",
  "@typescript-eslint/parser": "^4.0.1",
+ "babel-jest": "^29.7.0",
  "codecov": "^3.5.0",
  "cspell": "^4.1.0",
  "eslint": "^7.8.0",

diff --git a/bitcoin_client_rs/Cargo.toml b/bitcoin_client_rs/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "ledger_bitcoin_client"
-version = "0.4.1"
+version = "0.5.0"
 authors = ["Edouard Paris <m@edouard.paris>"]
 edition = "2018"
 description = "Ledger Bitcoin application client"
@@ -21,8 +21,8 @@ paranoid_client = ["miniscript"]
 
 [dependencies]
 async-trait = { version = "0.1", optional = true }
-bitcoin = { version = "0.31", default-features = false, features = ["no-std"] }
-miniscript = { version = "11.0", optional = true, default-features = false, features = ["no-std"] }
+bitcoin = { version = "0.32", default-features = false }
+miniscript = { version = "12.2", optional = true, default-features = false, features = ["no-std"] }
 
 [workspace]
 members = ["examples/ledger_hwi"]

diff --git a/bitcoin_client_rs/examples/ledger_hwi/Cargo.toml b/bitcoin_client_rs/examples/ledger_hwi/Cargo.toml
@@ -8,7 +8,7 @@ edition = "2018"
 clap = { version = "4.0.18", features = ["derive"] }
 ledger_bitcoin_client = { path = "../.." }
 async-trait = { version = "0.1"}
-bitcoin = { version = "0.31", default-features = false, features = ["no-std"] }
+bitcoin = { version = "0.32", default-features = false }
 hex = "0.4"
 base64 = "0.13.0"
 ledger-apdu = "0.10"

diff --git a/bitcoin_client_rs/src/async_client.rs b/bitcoin_client_rs/src/async_client.rs
@@ -91,7 +91,7 @@ impl<T: Transport> BitcoinClient<T> {
  BitcoinClientError::ClientError("Failed to derive descriptor".to_string())
  })?
  .script_pubkey()
- != expected_address.payload().script_pubkey()
+ != expected_address.assume_checked_ref().script_pubkey()
  {
  return Err(BitcoinClientError::InvalidResponse("Invalid address. Please update your Bitcoin app. If the problem persists, report a bug at https://github.com/LedgerHQ/app-bitcoin-new".to_string()));
  }

diff --git a/bitcoin_client_rs/src/client.rs b/bitcoin_client_rs/src/client.rs
@@ -86,7 +86,7 @@ impl<T: Transport> BitcoinClient<T> {
  BitcoinClientError::ClientError("Failed to derive descriptor".to_string())
  })?
  .script_pubkey()
- != expected_address.payload().script_pubkey()
+ != expected_address.assume_checked_ref().script_pubkey()
  {
  return Err(BitcoinClientError::InvalidResponse("Invalid address. Please update your Bitcoin app. If the problem persists, report a bug at https://github.com/LedgerHQ/app-bitcoin-new".to_string()));
  }

diff --git a/bitcoin_client_rs/src/psbt.rs b/bitcoin_client_rs/src/psbt.rs
@@ -8,7 +8,7 @@ use bitcoin::{
  consensus::encode::{deserialize, serialize, VarInt},
  ecdsa,
  hashes::Hash,
- key::Error as KeyError,
+ key::FromSliceError as KeyError,
  psbt::{raw, Input, Output, Psbt},
  secp256k1::{self, XOnlyPublicKey},
  taproot,