Merge remote-tracking branch 'agent/benma-agent/require-20-byte-eip712-address'

### src/rust/bitbox02-rust/src/hww/api/ethereum/sign_typed_msg.rs
@@ -346,7 +346,11 @@ fn encode_value(typ: &MemberType, value: Vec<u8>) -> Result<(Vec<u8>, String), E
             // The address is sent as a string by the host, so we can display it in the same way as
             // it is displayed on the host (mixed case vs lowercase, etc.).
             let encoded = if let [b'0', b'x' | b'X', rest @ ..] = value.as_slice() {
-                leftpad32(&hex::decode(rest).or(Err(Error::InvalidInput))?, false)?
+                let address = hex::decode(rest).or(Err(Error::InvalidInput))?;
+                if address.len() != 20 {
+                    return Err(Error::InvalidInput);
+                }
+                leftpad32(&address, false)?
             } else {
                 return Err(Error::InvalidInput);
             };
@@ -1194,6 +1198,20 @@ mod tests {
         );
     }
 
+    #[test]
+    fn test_encode_value_address() {
+        let value = |len: usize| {
+            let mut value = b"0x".to_vec();
+            value.resize(2 + len * 2, b'1');
+            value
+        };
+        let typ = mk_type(DataType::Address);
+
+        assert_eq!(encode_value(&typ, value(19)), Err(Error::InvalidInput));
+        assert!(encode_value(&typ, value(20)).is_ok());
+        assert_eq!(encode_value(&typ, value(21)), Err(Error::InvalidInput));
+    }
+
     #[test]
     fn test_get_transitive_types() {
         assert!(get_transitive_types(&[], "type-doesnt-exist").is_err());