lighthouse/eth2/utils
Paul Hauner b374ead24b
Protect against OOB offset in variable list SSZ decoding (#974)
* Add "pretty-ssz" tool to lcli

* Protect against OOB SSZ offset

* Add more work on decoding

* Fix benches

* Add more decode fixes

* Rename fixed_ptr

* Add, fix tests

* Add extra test

* Increase SSZ decode error granularity

* Ripples new error types across ssz crate

* Add comment to `sanitize_offset`

* Introduce max_len to SSZ list decoding

* Restrict FixedVector, check for zero-len items

* Double check for empty list

* Address Michael's comment
2020-04-20 15:35:47 +10:00
..
bls Use checked arithmetic in types and state proc (#1009) 2020-04-20 12:35:11 +10:00
cached_tree_hash Use checked arithmetic in types and state proc (#1009) 2020-04-20 12:35:11 +10:00
compare_fields Add extra level of comparisons to CompareFields 2019-05-24 14:08:19 +10:00
compare_fields_derive Robustify derive macro attribute parsing (#544) 2019-09-28 14:29:14 +10:00
deposit_contract Update to spec v0.11 (#959) 2020-04-01 22:03:03 +11:00
eth2_config Fix issues with testnet dir, update docs (#992) 2020-04-17 17:49:29 +10:00
eth2_hashing Refactor tree hashing (#861) 2020-03-05 08:07:27 +11:00
eth2_interop_keypairs Update to Spec v0.10 (#817) 2020-02-11 10:19:36 +11:00
eth2_testnet_config Update to spec v0.11 (#959) 2020-04-01 22:03:03 +11:00
int_to_bytes Update to spec v0.11 (#959) 2020-04-01 22:03:03 +11:00
lighthouse_metrics Fix clippy warnings (#813) 2020-01-21 18:38:56 +11:00
logging Add proto_array fork choice (#804) 2020-01-29 15:05:00 +11:00
merkle_proof Use checked arithmetic in types and state proc (#1009) 2020-04-20 12:35:11 +10:00
remote_beacon_node Update to spec v0.11 (#959) 2020-04-01 22:03:03 +11:00
safe_arith Use checked arithmetic in types and state proc (#1009) 2020-04-20 12:35:11 +10:00
serde_hex Use checked arithmetic in types and state proc (#1009) 2020-04-20 12:35:11 +10:00
slot_clock Allow slot clock to handle clock disparity (#929) 2020-04-01 17:40:04 +11:00
ssz Protect against OOB offset in variable list SSZ decoding (#974) 2020-04-20 15:35:47 +10:00
ssz_derive Use checked arithmetic in types and state proc (#1009) 2020-04-20 12:35:11 +10:00
ssz_types Protect against OOB offset in variable list SSZ decoding (#974) 2020-04-20 15:35:47 +10:00
swap_or_not_shuffle Update to spec v0.11 (#959) 2020-04-01 22:03:03 +11:00
test_random_derive Robustify derive macro attribute parsing (#544) 2019-09-28 14:29:14 +10:00
tree_hash Use checked arithmetic in types and state proc (#1009) 2020-04-20 12:35:11 +10:00
tree_hash_derive Refactor tree hashing (#861) 2020-03-05 08:07:27 +11:00