fix(stellar,python): use -p for --network-passphrase
What the developer wrote
Authored by Jakub Janků
fix(stellar,python): use -p for --network-passphrase
Previously, -n was used which collided with -n for --address.
The short name -p is used in the sign-soroban-authorization command
for the corresponding option with the same effect.
[no changelog]
What changed, and why it matters
This is a tiny command-line interface (CLI) fix for the Stellar-related commands in Trezor's Python library. Two different options were accidentally using the same short flag '-n': one for '--address' and one for '--network-passphrase'. The patch changes '--network-passphrase' to use '-p' instead, matching another Stellar command. This is mainly a usability bug, not a direct security vulnerability, because users could not reliably select the intended option by short flag.
Low priority: merge the fix as a normal bugfix. No security response required beyond routine release notes. Users relying on scripts that pass '-n' for network-passphrase should update them to use '-p' or the long form '--network-passphrase'.
Security signals we found
CLI option short-flag collision between --address and --network-passphrase
Potential for user confusion or incorrect command invocation
No direct evidence of exploitability beyond usability/argument-parsing ambiguity
Evidence from the diff
In python/src/trezorlib/cli/stellar.py, the click option decorator for –network-passphrase was using ‘-n’ as its short option. Another option, –address, already used ‘-n’, creating a collision. The patch changes the short option for –network-passphrase to ‘-p’, consistent with the sign-soroban-authorization command. The actual security effect is limited: it prevents ambiguous CLI parsing and possible user confusion/misoperation, but there is no evidence of memory corruption, cryptographic weakness, or authentication bypass.
Changed components
python/src/trezorlib/cli/stellar.pyTrezor Python CLI Stellar commandsInspect captured patch +1 / −1
### python/src/trezorlib/cli/stellar.py
@@ -92,7 +92,7 @@ def get_address(
default=stellar.DEFAULT_BIP32_PATH,
)
@click.option(
- "-n",
+ "-p",
"--network-passphrase",
default=stellar.DEFAULT_NETWORK_PASSPHRASE,
required=False,Why this scored 20/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.