diff --git a/external/tsschecker b/external/tsschecker
index 4734e9a5..7b1b3020 160000
--- a/external/tsschecker
+++ b/external/tsschecker
@@ -1 +1 @@
-Subproject commit 4734e9a597dab98142b84829d88b6c0a24e98377
+Subproject commit 7b1b3020a6e43d899fcfb2283d32bd88a0dc8286
diff --git a/src/futurerestore.cpp b/src/futurerestore.cpp
index 72d208e1..74ae132f 100644
--- a/src/futurerestore.cpp
+++ b/src/futurerestore.cpp
@@ -858,7 +858,7 @@ void futurerestore::enterPwnRecovery(plist_t build_identity, std::string bootarg
                   "failed to write generator to nvram");
         retassure(!irecv_saveenv(_client->recovery->client), "failed to save nvram");
         uint64_t gen = std::stoull(generator, nullptr, 16);
-        auto *nonce = (uint8_t *)alloc.allocate(_client->nonce_size);
+        auto *nonce = (uint8_t *)alloc.allocate(_client->nonce_size == 32 ? 48 : 20);
         if (_client->nonce_size == 20) {
             SHA1((unsigned char *) &gen, 8, nonce);
         } else if (_client->nonce_size == 32) {