AA zero address check (#151)

Author: mllwchrry

contracts/account-abstraction/AAccountRecovery.sol

@@ -106,6 +106,8 @@ abstract contract AAccountRecovery is IAccountRecovery {
         address provider_,
         bytes memory proof_
     ) internal virtual {
+        if (newOwner_ == address(0)) revert ZeroAddress();
+
         AAccountRecoveryStorage storage $ = _getAAccountRecoveryStorage();
 
         if (!$.recoveryProviders.contains(provider_)) revert ProviderNotRegistered(provider_);

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@solarity/solidity-lib",
-  "version": "3.1.3",
+  "version": "3.1.4",
   "license": "MIT",
   "author": "Distributed Lab",
   "readme": "README.md",

package.json

@@ -102,6 +102,12 @@ describe("AccountRecovery", () => {
         .to.be.revertedWithCustomError(accountRecovery, "ProviderNotRegistered")
         .withArgs(provider2);
     });
+
+    it("should revert if a new owner is zero address", async () => {
+      await expect(
+        accountRecovery.validateRecovery(ethers.ZeroAddress, provider1, RECOVERY_DATA),
+      ).to.be.revertedWithCustomError(accountRecovery, "ZeroAddress");
+    });
   });
 
   describe("recoveryProviderAdded", () => {