Go to file
Emmanuel T Odeke 9f17bc77af
baseapp, client: reject gRPC connections with out-of-range/nefarious x-cosmos-block-height values (#7663)
* baseapp, client: reject gRPC connections with out-of-range/nefarious x-cosmos-block-height values

Rejects gRPC connections that send out-of-range x-cosmos-block-height
values that previously weren't checked for. We now reject any negative
values and any value greater than max(int64) aka >9223372036854775807.

Also added an enforcement for returning an error if any negative heights
are passed into (*BaseApp).createQueryContext.

Fixes #7662

* baseapp, client: reject gRPC connections with out-of-range/nefarious x-cosmos-block-height values

Rejects gRPC connections that send out-of-range x-cosmos-block-height
values that previously weren't checked for. We now reject any negative
values and any value greater than max(int64) aka >9223372036854775807.

Also added an enforcement for returning an error if any negative heights
are passed into (*BaseApp).createQueryContext.

Fixes #7662

* Address Robert's feedback to extract negative height checker

* Fix tests

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
2020-11-03 18:35:22 +00:00
.circleci fix docs build failure (#6633) 2020-07-07 19:56:01 +02:00
.github build(deps): bump codecov/codecov-action from v1.0.13 to v1.0.14 (#7698) 2020-10-28 14:39:23 +01:00
baseapp baseapp, client: reject gRPC connections with out-of-range/nefarious x-cosmos-block-height values (#7663) 2020-11-03 18:35:22 +00:00
client baseapp, client: reject gRPC connections with out-of-range/nefarious x-cosmos-block-height values (#7663) 2020-11-03 18:35:22 +00:00
codec Throw an error on duplicate registration (#7729) 2020-10-29 15:32:47 +00:00
contrib Fix clang-format to specific version (#7350) 2020-10-27 10:04:34 +00:00
cosmovisor feat: allow "any" to specify a "binary" with no arch/os deps (#7230) 2020-09-14 21:32:10 +00:00
crypto Use embedded lib key type in sdk pub keys instead of bytes. (#7672) 2020-10-28 10:24:41 +00:00
docs Async Ack Fixes (#7735) 2020-11-02 15:13:48 +00:00
proto Async Ack Fixes (#7735) 2020-11-02 15:13:48 +00:00
scripts Add ADR 031 BaseApp and codec infrastructure (#7519) 2020-10-15 13:07:59 +00:00
server baseapp, client: reject gRPC connections with out-of-range/nefarious x-cosmos-block-height values (#7663) 2020-11-03 18:35:22 +00:00
simapp Add log_level CLI flag back (#7789) 2020-11-03 17:14:56 +00:00
snapshots test: fix data race in snapshots.ChunkReader test (#7299) 2020-09-14 14:00:08 +01:00
std Add ADR 031 BaseApp and codec infrastructure (#7519) 2020-10-15 13:07:59 +00:00
store [IAVL]: Bump to v0.15.0-rc4 (#7549) 2020-10-19 18:38:17 +00:00
telemetry Minor Code Cleanup - gRPC queries (#6862) 2020-07-28 12:53:35 +00:00
tests Rename RegisterGRPCRoutes (#7696) 2020-10-28 11:39:49 +00:00
testutil Update x/banking and x/crisis InitChain re slow Gaia startup (#7764) 2020-11-02 19:10:14 +00:00
third_party/proto Add back option go_package to third_party confio proofs.proto (#7565) 2020-10-15 13:35:28 +00:00
types Fix #7640: tally calculation precision error (#7641) 2020-11-02 14:50:33 +00:00
version ci: upload coverage once (#7690) 2020-10-27 16:46:57 +01:00
x Host Key changes (#7783) 2020-11-03 14:35:54 +00:00
.clang-format Fix clang-format to specific version (#7350) 2020-10-27 10:04:34 +00:00
.codecov.yml ci: upload coverage once (#7690) 2020-10-27 16:46:57 +01:00
.dockerignore Add basic Dockerfile to build all binaries and export gaiad 2018-04-10 12:39:47 +02:00
.gitattributes Merge PR #6426: Migrate API Server 2020-06-15 13:39:09 -04:00
.gitignore gitignore: adding Emacs .dir-locals.el (#7610) 2020-10-20 17:18:20 +00:00
.golangci.yml linter: enable nolintlint (#6162) 2020-05-08 08:46:12 +00:00
.goreleaser.yml ci: automate release post tag push (#6230) 2020-05-25 20:02:08 +02:00
.mergify.yml Tweak mergify config 2020-03-01 16:18:22 +00:00
buf.yaml Refactor x/bank according to ADR 031 (#7520) 2020-10-13 09:05:46 +00:00
build.sh Remove reproducible builder image (#7484) 2020-10-08 15:00:34 +01:00
CHANGELOG.md Stargate RC2 - Changelog updates & tag RC (#7785) 2020-11-02 16:25:36 -08:00
CODE_OF_CONDUCT.md Update CODE_OF_CONDUCT.md (#7381) 2020-09-28 11:28:30 +02:00
CONTRIBUTING.md Fix clang-format to specific version (#7350) 2020-10-27 10:04:34 +00:00
docker-compose.yml buildsystem: simplify Makefile and ci automation (#7189) 2020-08-31 15:39:05 +02:00
Dockerfile Makefile: simplify and clean-up (#7453) 2020-10-05 10:22:18 +02:00
go.mod [IAVL]: Bump to v0.15.0-rc4 (#7549) 2020-10-19 18:38:17 +00:00
go.sum [IAVL]: Bump to v0.15.0-rc4 (#7549) 2020-10-19 18:38:17 +00:00
LICENSE Add README.md to Basecoin; Update licenses 2018-01-28 18:17:19 -08:00
Makefile Fix clang-format to specific version (#7350) 2020-10-27 10:04:34 +00:00
package-lock.json Proportional slashing ADR Update (#6368) 2020-10-05 09:30:50 +02:00
README.md update readme to link starport instead of scaffold (#7613) 2020-10-21 08:08:20 +00:00
SECURITY.md update SECURITY.md (#6263) 2020-05-21 11:12:51 +02:00
STABLE_RELEASES.md Stable Releases: Definition and Process (#6394) 2020-07-14 10:28:53 +02:00

Cosmos SDK

banner

The Cosmos-SDK is a framework for building blockchain applications in Golang. It is being used to build Gaia, the first implementation of the Cosmos Hub.

WARNING: The SDK has mostly stabilized, but we are still making some breaking changes.

Note: Requires Go 1.15+

Quick Start

To learn how the SDK works from a high-level perspective, go to the SDK Intro.

If you want to get started quickly and learn how to build on top of the SDK, please follow the SDK Application Tutorial. You can also fork the tutorial's repository to get started building your own Cosmos SDK application.

For more, please go to the Cosmos SDK Docs.

Cosmos Hub Mainnet

The Cosmos Hub application, gaia, has moved to its own repository. Go there to join the Cosmos Hub mainnet and more.

Starport

If you are starting a new app or a new module you can use Starport to help you get started and speed up development. If you have any questions or find a bug, feel free to open an issue in the repo.

Disambiguation

This Cosmos-SDK project is not related to the React-Cosmos project (yet). Many thanks to Evan Coury and Ovidiu (@skidding) for this Github organization name. As per our agreement, this disambiguation notice will stay here.