Fixed [P1-L-05] Unvalidated "delegate_voter.registrar"

by adding has_one = registrar constraint to the delegate_voter
metaplex-foundation · Sep 27, 2024 · c89749b · c89749b
1 parent 24b39ba
commit c89749b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/programs/voter-stake-registry/src/instructions/change_delegate.rs b/programs/voter-stake-registry/src/instructions/change_delegate.rs
@@ -22,6 +22,7 @@ pub struct ChangeDelegate<'info> {
     pub voter: AccountLoader<'info, Voter>,
     pub voter_authority: Signer<'info>,
 
+    #[account(has_one = registrar)]
     pub delegate_voter: AccountLoader<'info, Voter>,
 
     /// CHECK: Mining Account that belongs to Rewards Program and some delegate

diff --git a/programs/voter-stake-registry/src/instructions/create_deposit_entry.rs b/programs/voter-stake-registry/src/instructions/create_deposit_entry.rs
@@ -31,6 +31,7 @@ pub struct CreateDepositEntry<'info> {
     )]
     pub vault: Box<Account<'info, TokenAccount>>,
     pub voter_authority: Signer<'info>,
+    #[account(has_one = registrar)]
     pub delegate_voter: AccountLoader<'info, Voter>,
 
     #[account(mut)]