ICS27: Interchain Accounts allows packets to be received on controller side

[colin-axner]

Giving the spec a quick glance, I don't see a check enforcing that the receiving port address is the host chain port. This means a malicious ics27 module (host chain) could trick the controller chain into accidentally trying to execute a transaction. I'm not sure if it is exploitable in any way, but there should probably be a check enforcing that controller chain ports cannot receive packets

[crodriguezvega]

there should probably be a check enforcing that controller chain ports cannot receive packets

@colin-axner, is then the action for this issue to update the spec to include the same kind of logic that ibc-go has on the OnRecvPacket callback of the controller chain?

[colin-axner]

Yes I think so. Will defer to @AdityaSripal on how this should be specified/indicated in the spec