CVE-2024-38365 public disclosure (btcd `FindAndDelete` bug)

[AntoineP]

@ariard

No, a signature does not need to commit to the scriptCode as one can use OP_CODESEPARATOR to spend pre-segwit script.

If you get the signature out of the scriptCode by using an OP_CODESEPARATOR, then you won’t be able to exploit the FindAndDelete discrepancy since there is no signature to find anymore.