panic if verifying with incorrect leaf count

[themighty1]

When verifying a proof, we rely on the Prover (a potentially malicious party in our case) to inform the Verifier about the correct number of the leaves in the tree. Trying to verify with an incorrect number causes a panic.

Can be reproduced by modifying a line in this example:

rs-merkle/src/merkle_proof.rs

Line 155 in 8ffa623

/// assert!(proof.verify(root, &indices_to_prove, leaves_to_prove, leaves.len()));

and changing the last arg to leaves.len() + 100

[antouhou]

Thank you for the report, I'll look into it!

[antouhou]

Hi @themighty1! The issue has been fixed in the release 1.4.1 Thanks!