chore: add defense in depth input validation

Agoric · Oct 26, 2021 · 364afca · 364afca
1 parent 9699124
commit 364afca
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/packages/ERTP/src/paymentLedger.js b/packages/ERTP/src/paymentLedger.js
@@ -100,6 +100,9 @@ export const makePaymentLedger = (
    * @returns {Payment[]}
    */
   const moveAssets = (payments, newPaymentBalances) => {
+    assertArray(payments, 'payments');
+    assertArray(newPaymentBalances, 'newPaymentBalances');
+
     // There may be zero, one, or many payments as input to
     // moveAssets. We want to protect against someone passing in
     // what appears to be multiple payments that turn out to actually