test(ci): gate post-RC18 signing hardening accurately

Author: BitHighlander

tests/test_msg_mayachain_signtx.py

@@ -58,7 +58,9 @@ class TestMsgMayaChainSignTx(common.KeepKeyTest):
 
     def test_ack_rejects_send_and_deposit_together(self):
         """An unused deposit submessage must not suppress the signed tx memo."""
-        self.requires_firmware("7.15.0")
+        # The exactly-one-message check was added after RC18 as part of the
+        # 7.16 alpha security backport (firmware 71e6c1d942).
+        self.requires_firmware("7.16.0")
         self.requires_fullFeature()
         self.setup_mnemonic_nopin_nopassphrase()
 

tests/test_msg_zcash_sign_pczt_device.py

@@ -337,6 +337,7 @@ def test_ironwood_rejects_a_non_empty_orchard_bundle(self):
         verification is [s]G = R + [H(R||rk||M)]rk and rk and M are shared. The
         Orchard bundle's valueBalance never enters the device's fee check.
         """
+        self.requires_firmware(self.IRONWOOD_FIRMWARE)
         actions = [note_action(CMX_IRONWOOD)]
         kwargs = sign_kwargs(actions, ironwood=True)
         # Anything but the ZIP-229 v6 empty-bundle digest must be refused.

tests/test_multisig.py

@@ -255,6 +255,9 @@ def test_oversized_signature_is_rejected(self):
         The declared max_size is a decoder bound, never a runtime one. This
         asserts the device applies the real one.
         """
+        # The 72-byte runtime bound was backported after RC18 in the 7.16
+        # alpha security line (firmware 40da090620).
+        self.requires_firmware("7.16.0")
         self.setup_mnemonic_nopin_nopassphrase()
 
         node = ckd_public.deserialize('xpub661MyMwAqRbcF1zGijBb2K6x9YiJPh58xpcCeLvTxMX6spkY3PcpJ4ABcCyWfskq5DDxM3e6Ez5ePCqG5bnPUXR4wL8TZWyoDaUdiWW7bKy')