During differential fuzzing between rust-bitcoin and Bitcoin Core of PSBT parsing, we just figured out that rust-bitcoin does not check if the non-witness UTXO matches outpoint hash.
Example: cHNidP8BAHN0/wEDAQAAAAAAAAAAAC4ocwBzdP8BB3NiBQAAAAAAAAAAAAAAAAAAAAAABgYABf7///90/wEACgAAAAAAAAAsx2AABXBzYsdgBAMFAAAAdP8BBwEAAAAAAAAAAAAAAAAAAACAAFIABgYABQAAc2J0/wDZAAEAc3T/QQMBAAAAAAAKCgYALihzAHN0/wEHAQAAAAAAAAAAAAAAAAAAAAD/AAAGBgAFAABzYnT/AQAKAIAAAAAAACTHYAAFcHNix2AAAwUAAAB0/wEHAQAAAAAAAAAkx2AABXDtYsdgBAMFAAAAdP8BB0JCCgoAAAAAAAA=
During differential fuzzing between rust-bitcoin and Bitcoin Core of PSBT parsing, we just figured out that rust-bitcoin does not check if the non-witness UTXO matches outpoint hash.
Example:
cHNidP8BAHN0/wEDAQAAAAAAAAAAAC4ocwBzdP8BB3NiBQAAAAAAAAAAAAAAAAAAAAAABgYABf7///90/wEACgAAAAAAAAAsx2AABXBzYsdgBAMFAAAAdP8BBwEAAAAAAAAAAAAAAAAAAACAAFIABgYABQAAc2J0/wDZAAEAc3T/QQMBAAAAAAAKCgYALihzAHN0/wEHAQAAAAAAAAAAAAAAAAAAAAD/AAAGBgAFAABzYnT/AQAKAIAAAAAAACTHYAAFcHNix2AAAwUAAAB0/wEHAQAAAAAAAAAkx2AABXDtYsdgBAMFAAAAdP8BB0JCCgoAAAAAAAA=