Function: validateUserOp(UserOperation userOp, byte[32] userOpHash)

This function validates submitted user operations. It allows executing previously submitted recovery requests (after the security delay has elapsed) and submitting new recovery requests (which have to be signed by a sufficient number of guardians).

Inputs

• userOp

  • Control: Partial (the most important field, callData, is arbitrary).

  • Constraints: callData must either correspond to a previous recovery request or represent a valid, signed recovery request submission.

  • Impact: Operation to be validated.

• userOpHash

  • Control: None.

  • Constraints: None.

  • Impact: Hash of the userOp, computed by the entry point.

Branches and code coverage

Intended branches

• Validates a previously submitted recovery request (starting from the end of the security delay period).

  Test coverage

• Allows submitting a new recovery request if properly signed and valid.

  Test coverage

Negative behavior

• Reverts if the module is not configured or the threshold is zero.

  Negative test

• Reverts if not enough signatures are supplied.

  Negative test

• Reverts if one (or more) signatures are invalid (do not match the guardian).

  Negative test

• Reverts if one (or more) signatures correspond to an unauthorized guardian.

  Negative test

• Reverts if one (or more) signatures are repeated or not in the correct order.

  Negative test

• Reverts if the operation does not match a previous recovery request and is not a recovery request submission.

  Negative test