allow cancel from tx explorer goto index
What changed, and why it matters
This small change lets users cancel out of a 'go to index' prompt in the COLDCARD's transaction explorer instead of being forced to enter a number. It is a minor user-experience fix with no direct security impact visible from the code change.
No security action required; treat as routine UX improvement.
Security signals we found
No security-relevant signals detected in the diff
Change is purely a UI/UX affordance (cancel option)
No input validation, buffer handling, cryptography, or privilege logic modified
Evidence from the diff
In shared/auth.py, the TXExplorer class handles menu navigation while exploring a transaction. When the user presses ‘2’ to jump to a specific item index, the code calls ux_enter_number() to ask for the start index. The patch adds can_cancel=True to that call, so the user can abort the prompt. If the result is None (cancelled), the existing code already continues the loop without changing the start index.
Changed components
shared/auth.pyTXExplorer classux_enter_number() prompt for transaction explorer index navigationInspect captured patch +2 / −1
diff --git a/shared/auth.py b/shared/auth.py
index f91ad4f..fd63c3e 100644
--- a/shared/auth.py
+++ b/shared/auth.py
@@ -1590,7 +1590,8 @@ class TXExplorer:
start += self.n
elif ch == "2":
max_v = self.max_items - 1
- res = await ux_enter_number("Start Idx (0-%d):" % max_v, max_value=max_v)
+ res = await ux_enter_number("Start Idx (0-%d):" % max_v, max_value=max_v,
+ can_cancel=True)
if res is None: continue
start = res
else:
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.