From f160812102e140e91a28d17d8ba2a3358574954d Mon Sep 17 00:00:00 2001
From: Jack <jack@unchained.com>
Date: Tue, 5 Nov 2024 16:37:50 -0900
Subject: [PATCH] feat: check for multisig or segwit on Unchained path.

chore: add changelog
---
 legacy/firmware/.changelog.d/4324.added |  2 ++
 legacy/firmware/crypto.c                | 39 +++++++++++++++----------
 2 files changed, 26 insertions(+), 15 deletions(-)
 create mode 100644 legacy/firmware/.changelog.d/4324.added

diff --git a/legacy/firmware/.changelog.d/4324.added b/legacy/firmware/.changelog.d/4324.added
new file mode 100644
index 0000000000..a5573f9e44
--- /dev/null
+++ b/legacy/firmware/.changelog.d/4324.added
@@ -0,0 +1,2 @@
+
+Unchained paths for p2wsh multisig
diff --git a/legacy/firmware/crypto.c b/legacy/firmware/crypto.c
index 5d1f4ae907..0ac89810da 100644
--- a/legacy/firmware/crypto.c
+++ b/legacy/firmware/crypto.c
@@ -517,7 +517,7 @@ bool coin_path_check(const CoinInfo *coin, InputScriptType script_type,
     return valid;
   }
 
-  if (address_n[0] == PATH_HARDENED + 45) {
+  if (address_n[0] == PATH_HARDENED + 45 && address_n_count != 6) {
     if (address_n_count == 4) {
       // m/45' - BIP45 Copay Abandoned Multisig P2SH
       // m / purpose' / cosigner_index / change / address_index
@@ -546,20 +546,6 @@ bool coin_path_check(const CoinInfo *coin, InputScriptType script_type,
         valid = valid && (address_n[3] <= PATH_MAX_CHANGE);
         valid = valid && (address_n[4] <= PATH_MAX_ADDRESS_INDEX);
       }
-    } else if (address_n_count == 6) {
-      // Unchained Capital compatibility pattern. Will be removed in the
-      // future.
-      // m/45'/coin_type'/account'/[0-1000000]/change/address_index
-      // m/45'/coin_type/account/[0-1000000]/change/address_index
-      valid = valid &&
-              check_cointype(coin, PATH_HARDENED | address_n[1], full_check);
-      valid = valid && ((address_n[1] & PATH_HARDENED) ==
-                        (address_n[2] & PATH_HARDENED));
-      valid =
-          valid && ((address_n[2] & PATH_UNHARDEN_MASK) <= PATH_MAX_ACCOUNT);
-      valid = valid && (address_n[3] <= 1000000);
-      valid = valid && (address_n[4] <= PATH_MAX_CHANGE);
-      valid = valid && (address_n[5] <= PATH_MAX_ADDRESS_INDEX);
     } else {
       return false;
     }
@@ -573,6 +559,29 @@ bool coin_path_check(const CoinInfo *coin, InputScriptType script_type,
     return valid;
   }
 
+  if (address_n[0] == PATH_HARDENED + 45 && address_n_count == 6) {
+    // Unchained Capital compatibility pattern.
+    // m/45'/coin_type'/account'/[0-1000000]/change/address_index
+    // m/45'/coin_type/account/[0-1000000]/change/address_index
+    valid =
+        valid && check_cointype(coin, PATH_HARDENED | address_n[1], full_check);
+    valid = valid &&
+            ((address_n[1] & PATH_HARDENED) == (address_n[2] & PATH_HARDENED));
+    valid = valid && ((address_n[2] & PATH_UNHARDEN_MASK) <= PATH_MAX_ACCOUNT);
+    valid = valid && (address_n[3] <= 1000000);
+    valid = valid && (address_n[4] <= PATH_MAX_CHANGE);
+    valid = valid && (address_n[5] <= PATH_MAX_ADDRESS_INDEX);
+    valid = valid && has_multisig;
+
+    if (full_check) {
+      valid = valid && (script_type == InputScriptType_SPENDMULTISIG ||
+                        script_type == InputScriptType_SPENDWITNESS);
+      valid = valid && has_multisig;
+    }
+
+    return valid;
+  }
+
   if (address_n[0] == PATH_HARDENED + 48) {
     valid = valid && (address_n_count == 5 || address_n_count == 6);
     valid = valid && check_cointype(coin, address_n[1], full_check);