LaconicNetwork/cosmos-sdk
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

docs: update global type registration code link (#23230)

Browse Source
This commit is contained in:
Zoro 2025-01-07 21:00:41 +08:00 committed by GitHub
parent 26dc8b3df4
commit c1192daf56
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/architecture/adr-019-protobuf-state-encoding.md
View File

@ -150,7 +150,7 @@ and client developer UX.
### Safe usage of `Any`
By default, the [gogo protobuf implementation of `Any`](https://pkg.go.dev/github.com/cosmos/gogoproto/types)
uses [global type registration]( https://github.com/cosmos/gogoproto/blob/master/proto/properties.go#L540)
uses [global type registration](https://github.com/cosmos/gogoproto/blob/v1.7.0/proto/properties.go#L546)
to decode values packed in `Any` into concrete
go types. This introduces a vulnerability where any malicious module
in the dependency tree could register a type with the global protobuf registry