lotus/chain
gammazero ca23a4406c Do not update message info cache until after message validation
The sequence number used for replay detection was being updated before message validation confirmed that the message originated from the correct host. This would allow one host A to create a message with the ID of another host B that could then update the cached sequence number for B. While the message from A would fail validation and be ignored, the cached sequence number for B would get updated. This would lead to a temporary DoS for host B as its messages were incorrectly rejected as replays.

This fixes the issue by setting the cached sequence number after message validation.
2023-08-23 14:30:22 -07:00
..
actors feat: miner cli: sectors list upgrade-bounds tool 2023-05-26 12:29:36 +02:00
beacon fix: daemon: set real beacon schedule when importing chain 2023-07-17 09:36:41 -04:00
consensus refactor: move vm.Rand to rand.Rand 2023-08-22 11:34:28 -04:00
ethhashlookup simplify transaction hash db queries, prevent fd leaks 2023-01-30 11:03:12 -05:00
events Add tmp indices to events table while performing migration to V2 2023-07-11 10:16:47 +00:00
exchange fix: error checks 2023-01-04 20:10:21 +08:00
gen refactor: move vm.Rand to rand.Rand 2023-08-22 11:34:28 -04:00
index fix: improve perf of msgindex backfill 2023-06-01 14:36:05 +00:00
market Address simple linter issues 2022-11-24 16:32:27 +00:00
messagepool Invert msg validation check to explicitly specify reject errors 2023-06-28 13:35:21 -04:00
messagesigner fix: Don't call WalletExport in msg signing flows 2023-02-10 02:37:59 +01:00
rand refactor: move vm.Rand to rand.Rand 2023-08-22 11:34:28 -04:00
state chore: build: Merge/v22 into 21 for 23 (#10702) 2023-04-19 18:40:18 -04:00
stmgr refactor: move vm.Rand to rand.Rand 2023-08-22 11:34:28 -04:00
store fix: chainstore: do not get stuck in unhappy equivocation cases 2023-08-11 17:32:39 -04:00
sub Do not update message info cache until after message validation 2023-08-23 14:30:22 -07:00
types fix: ethtypes: handle length overflow case 2023-07-21 12:26:29 -04:00
vectors NV18: Filecoin EVM runtime + Actor Events + EthAccount + EAM + f4 addressing (#9998) 2023-01-13 19:11:13 +00:00
vm refactor: move vm.Rand to rand.Rand 2023-08-22 11:34:28 -04:00
wallet NV18: Filecoin EVM runtime + Actor Events + EthAccount + EAM + f4 addressing (#9998) 2023-01-13 19:11:13 +00:00
badtscache.go refactor: update cache to the new generic version (#10463) 2023-03-13 15:29:09 -07:00
block_receipt_tracker.go refactor: update cache to the new generic version (#10463) 2023-03-13 15:29:09 -07:00
checkpoint.go chore: fix imports 2022-06-14 17:00:51 +02:00
sync_manager_test.go fix make gen 2022-08-29 16:25:30 +02:00
sync_manager.go Address review 2023-08-09 19:28:24 -04:00
sync_test.go feat: chainstore: FRC-0051: Remove all equivocated blocks from tipsets 2023-08-09 19:28:24 -04:00
sync.go Address review 2023-08-09 19:28:24 -04:00
syncstate.go Expose WorkerID 2020-10-28 20:22:07 +01:00
types_test.go fix make gen 2022-08-29 16:25:30 +02:00