gnark-crypto's `bls12381G2.SetBytes` accepts uncompressed point with compression flag set

Open

#30 opened on Feb 26, 2025 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 4/5
Estimated time: 3-5 days
Newbie friendliness: 32/100

Issue type: Bug
Clarity: Needs clarification
Activity status: Stale
Tech stack: go
Domain: cryptography

Research direction

Start at the bls12381G2.SetBytes entry point and reproduce the issue with the witness bytes in the report. Trace how the compression flag and point encoding are validated, then add coverage showing that this malformed input is handled correctly.

Written by the indexing model from the issue text.

Description

witness is

	f.Add([]byte("\x99\x88U\xbbN\x7f@\xa2\xac\xb93v)\xf8\x11\x05\\(\x16e\xcf\x15\x80S\x12,\xe2:\xebb\x9c\x15z7\xab\xa5)\xb4\xebN\xbdޣ\xf7\x8a\x17\xee\n\x110ա\x90\xcfoP|\xd5\xf4\xa6\xb4\xebPh\xbe\x19\x86\x00E\x04\v\xd4lKU\xa1x;\xcbq֗\\\x902\rؔ\xa2\xff?\xf0\x8a\x9f\xae4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"))

Dominant language: Go
Stars: 5
Forks: 12
Avg merge: 12d 28m
Merged PRs (30d): 1

Contributor guide

No contributing guide indexed for this repository

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[aw] Daily Reliability Review failed Open

agentic-workflows

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

github/gh-aw#63263 · Opened Sep 24, 2026
[aw] Go API Consistency Review Agent timed out Open

agentic-workflows

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

microsoft/agent-framework-go#1179 · Opened Sep 24, 2026
macOS incorrectly prompts to move app when installed in an `/Applications` subdirectory Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

ollama/ollama#18628 · Opened Sep 24, 2026
[Bug]: OLLAMA_KEEP_ALIVE="5m" / "24h" crashes Ollama embedding and vision models with ValueError Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

infiniflow/ragflow#20223 · 1 reaction · Opened Sep 24, 2026
[pkg/translator/faro] Malformed sdk_integrations value panics the Faro exporter Open

bug needs triage pkg/translator/faro

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

open-telemetry/opentelemetry-collector-contrib#51484 · 1 comment · Opened Sep 24, 2026

More Go issues