diff options
| author | Wladimir J. van der Laan <[email protected]> | 2018-11-18 10:14:25 +0100 |
|---|---|---|
| committer | Wladimir J. van der Laan <[email protected]> | 2018-11-18 10:15:18 +0100 |
| commit | 6d58a5c3b05585b01c960776e00856637ff1794d (patch) | |
| tree | 5655fdd6ce9b4132751e70f15d0ea3272e6ba2de /src/httpserver.cpp | |
| parent | Merge #14731: doc: Improve scripted-diff developer docs (diff) | |
| parent | disallow oversized CBlockHeaderAndShortTxIDs (diff) | |
| download | discoin-6d58a5c3b05585b01c960776e00856637ff1794d.tar.xz discoin-6d58a5c3b05585b01c960776e00856637ff1794d.zip | |
Merge #14685: fix a deserialization overflow edge case
b08af10fb299dc3fdcd1f022619fb112c72e5d8e disallow oversized CBlockHeaderAndShortTxIDs (Kaz Wesley)
6bed4b374daf26233e96fa7863d4324a5bfa99c2 fix a deserialization overflow edge case (Kaz Wesley)
051faf7e9d4e32142f95f7adb31d2f53f656cb66 add a test demonstrating an overflow in a deserialization edge case (Kaz Wesley)
Pull request description:
A specially-constructed BlockTransactionsRequest can cause `offset` to wrap in deserialization. In the current code, there is not any way this could be dangerous; but disallowing it reduces the potential for future surprises.
Tree-SHA512: 1aaf7636e0801a905ed8807d0d1762132ac8b4421a600c35fb6d5e5033c6bfb587d8668cd9f48c7a08a2ae793a677b7649661e3ae248ab4f8499ab7b6ede483c
Diffstat (limited to 'src/httpserver.cpp')
0 files changed, 0 insertions, 0 deletions