AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

feat(core): allow disabling button on Eckhart `show_info()` layout

Public commit record

What the developer wrote

Authored by Roman Zeyde

77/100 · Adequate
feat(core): allow disabling button on Eckhart `show_info()` layout

It will be used for N4W1 I/O layouts.

[no changelog]
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
The short version

What changed, and why it matters

This commit is a routine user-interface feature change for Trezor hardware wallets. It lets the new 'Eckhart' screen layout optionally show an information screen with a disabled button (for example, a grayed-out 'Continue' that becomes active only after a timer or condition). Older layouts keep their previous behavior. There is no direct evidence in the commit that this fixes a security vulnerability; it reads as a product/usability feature.

Recommended action

No immediate security action required. Treat as a normal feature commit. If auditing, verify that downstream Eckhart screens using disabled buttons cannot be tricked into enabling the button prematurely through host-supplied data, since the enabled/disabled state is now part of the API surface.

Security signals we found

01

API signature change from `button: str` to `button: tuple[str, bool] | None`

02

Disabled button support added only for Eckhart layout

03

Bolt and Caesar/Delizia layouts explicitly reject or ignore disabled buttons

04

No input validation changes for untrusted data paths

05

No mention of vulnerability, CVE, or security fix in commit message or diff

Risk score

Why this scored 19/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 2/15
Confidence 9/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.