Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(header): Only bridge node should panic on data root mismatch in e… #2558

Merged
merged 2 commits into from
Aug 11, 2023

Conversation

renaynay
Copy link
Member

@renaynay renaynay commented Aug 10, 2023

This PR fixes a DoS first discovered by @Wondertan and then secondarily by @vgonkivs 🤠

Only bridge nodes should panic on receiving a header where the computed data root does not match the DataHash in the RawHeader on ExtendedHeader validation.

Resolves #2555

@renaynay renaynay added area:header Extended header kind:fix Attached to bug-fixing PRs labels Aug 10, 2023
@renaynay renaynay self-assigned this Aug 10, 2023
core/listener.go Outdated Show resolved Hide resolved
header/header.go Outdated Show resolved Hide resolved
header/header.go Outdated Show resolved Hide resolved
@codecov-commenter
Copy link

Codecov Report

Merging #2558 (94671b4) into main (94a6b63) will increase coverage by 0.07%.
Report is 2 commits behind head on main.
The diff coverage is 0.00%.

@@            Coverage Diff             @@
##             main    #2558      +/-   ##
==========================================
+ Coverage   51.08%   51.15%   +0.07%     
==========================================
  Files         158      158              
  Lines       10403    10398       -5     
==========================================
+ Hits         5314     5319       +5     
+ Misses       4626     4616      -10     
  Partials      463      463              
Files Changed Coverage Δ
core/exchange.go 35.29% <0.00%> (+0.67%) ⬆️
core/listener.go 55.35% <0.00%> (+3.14%) ⬆️

... and 5 files with indirect coverage changes

@renaynay renaynay merged commit 87e9500 into celestiaorg:main Aug 11, 2023
12 of 14 checks passed
@renaynay renaynay deleted the fix-panic branch August 11, 2023 11:09
renaynay added a commit to renaynay/celestia-node that referenced this pull request Aug 23, 2023
celestiaorg#2558)

This PR fixes a DoS first discovered by @Wondertan and then secondarily
by @vgonkivs 🤠

Only bridge nodes should panic on receiving a header where the computed
data root does not match the DataHash in the RawHeader on ExtendedHeader
validation.

Resolves celestiaorg#2555
walldiss pushed a commit to walldiss/celestia-node that referenced this pull request Sep 22, 2023
celestiaorg#2558)

This PR fixes a DoS first discovered by @Wondertan and then secondarily
by @vgonkivs 🤠

Only bridge nodes should panic on receiving a header where the computed
data root does not match the DataHash in the RawHeader on ExtendedHeader
validation.

Resolves celestiaorg#2555

(cherry picked from commit 87e9500)
walldiss pushed a commit that referenced this pull request Sep 22, 2023
#2558)

This PR fixes a DoS first discovered by @Wondertan and then secondarily
by @vgonkivs 🤠

Only bridge nodes should panic on receiving a header where the computed
data root does not match the DataHash in the RawHeader on ExtendedHeader
validation.

Resolves #2555

(cherry picked from commit 87e9500)
walldiss pushed a commit to walldiss/celestia-node that referenced this pull request Sep 22, 2023
celestiaorg#2558)

This PR fixes a DoS first discovered by @Wondertan and then secondarily
by @vgonkivs 🤠

Only bridge nodes should panic on receiving a header where the computed
data root does not match the DataHash in the RawHeader on ExtendedHeader
validation.

Resolves celestiaorg#2555

(cherry picked from commit 87e9500)
walldiss pushed a commit to walldiss/celestia-node that referenced this pull request Sep 25, 2023
celestiaorg#2558)

This PR fixes a DoS first discovered by @Wondertan and then secondarily
by @vgonkivs 🤠

Only bridge nodes should panic on receiving a header where the computed
data root does not match the DataHash in the RawHeader on ExtendedHeader
validation.

Resolves celestiaorg#2555

(cherry picked from commit 87e9500)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:header Extended header kind:fix Attached to bug-fixing PRs
Projects
None yet
Development

Successfully merging this pull request may close these issues.

header: Do not panic on data root mismatch on unmarshal
4 participants