-
Notifications
You must be signed in to change notification settings - Fork 20k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SEC-53 DoS in block_processor on txs with invalid EC sig #1384
Comments
This PR adds but skips the test that trigger this: #1385 |
maoueh
pushed a commit
to streamingfast/go-ethereum
that referenced
this issue
Mar 30, 2023
maoueh
pushed a commit
to streamingfast/go-ethereum
that referenced
this issue
Apr 10, 2023
* add ip ratelimit * update * update * update explorer adddress * updae recapcha * remove binance * cmd/faucet: fix conn to wrapped wsconn * cmd/faucet: keystore updated to save and load one same addres once * clean: remove btcd v0.20.1-beta and avoid to ambiguous import (#1) * ci: fix truffle test (ethereum#1384) --------- Co-authored-by: fudongbai <296179868@qq.com> Co-authored-by: Nathan <galaxystroller@gmail.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
If at https://github.com/ethereum/go-ethereum/blob/develop/core/block_processor.go#L77
an error is returned which does not match
Then it panics on line 84 as the gas variable is nil:
The error returned for for test cases TRANSCT_rvalue_TooShort, TRANSCT_rvalue_TooLarge and TRANSCT_svalue_TooLarge in https://github.com/ethereum/tests/blob/develop/BlockchainTests/bcInvalidRLPTest.json
is https://github.com/ethereum/go-ethereum/blob/develop/core/types/transaction.go#L172
We can fix this by either making these errors of type IsInvalidTxErr, but the core problem here is the check for errors specific to package core. This breaks as the tx processing calls into other packages, for example crypto, which has it's own set of errors and does not import package core.
Probably a better solution is to reconsider the error type checking in this case, and explicitly handle generic errors in a way that will properly reject the tx.
The text was updated successfully, but these errors were encountered: