Validate encoding of extrinsics passed to runtime (#6442)

* Validate encoding of extrinsics passed to runtime

* Bump codec version explicitly

substrate/primitives/api/proc-macro/src/decl_runtime_apis.rs

@@ -191,7 +191,8 @@ fn generate_native_call_generators(decl: &ItemTrait) -> Result<TokenStream> {
 				input: &I, error_desc: &'static str,
 			) -> std::result::Result<R, String>
 		{
-			<R as #crate_::Decode>::decode(
+			<R as #crate_::DecodeLimit>::decode_with_depth_limit(
+				#crate_::MAX_EXTRINSIC_DEPTH,
 				&mut &#crate_::Encode::encode(input)[..],
 			).map_err(|e| format!("{} {}", error_desc, e.what()))
 		}

substrate/primitives/api/proc-macro/src/impl_runtime_apis.rs

@@ -83,7 +83,10 @@ fn generate_impl_call(
 	Ok(
 		quote!(
 			#(
-				let #pnames : #ptypes = match #c_iter::Decode::decode(&mut #input) {
+				let #pnames : #ptypes = match #c_iter::DecodeLimit::decode_all_with_depth_limit(
+					#c_iter::MAX_EXTRINSIC_DEPTH,
+					&mut #input
+				) {
 					Ok(input) => input,
 					Err(e) => panic!("Bad input data provided to {}: {}", #fn_name_str, e.what()),
 				};