octo
/
Zebra
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Zebra/zebra-chain/src
History
teor db2f920d96 Stop untrusted preallocation during JoinSplit deserialization 
Zebra believes the untrusted `JoinSplit` list size field when
deserializing `JoinSplit`s, and preallocates a `Vec` based on that size.

This is trivial a memory exhaustion attack.

Instead, use the current auto-growing implementation, which is limited
by the size of the message data.
 		2021-03-22 11:54:31 -04:00
..
block Replace smart quotes with ascii quotes 2021-03-15 03:18:10 -04:00
parameters Add transaction version 5 stubs (#1824) 2021-03-04 07:56:41 +10:00
primitives export proptest impls for use in downstream crates (#1092) 2020-09-23 18:52:52 -07:00
sapling Replace smart quotes with ascii quotes 2021-03-15 03:18:10 -04:00
serialization chain: add missing sources to SerializationError 2020-12-01 19:16:41 -08:00
sprout Replace smart quotes with ascii quotes 2021-03-15 03:18:10 -04:00
transaction Stop untrusted preallocation during JoinSplit deserialization 2021-03-22 11:54:31 -04:00
transparent Replace smart quotes with ascii quotes 2021-03-15 03:18:10 -04:00
work fix rust beta panic string warnings (#1731) 2021-02-15 07:00:02 +10:00
amount.rs Use collect() to avoid a lint 2021-01-19 11:02:20 -05:00
block.rs Clippy: Use Option::map instead of a manual impl 2021-03-01 23:31:18 -05:00
fmt.rs Inbound `FindBlocks` and `FindHeaders` (#1347) 2020-12-01 07:30:37 +10:00
lib.rs Fix some missed Sapling to Canopy checkpoint code changes 2021-03-18 10:13:47 +10:00
parameters.rs Add transaction version 5 stubs (#1824) 2021-03-04 07:56:41 +10:00
primitives.rs chain: move Transparent{Input,Output} to transparent 2020-08-17 11:46:34 -07:00
sapling.rs export proptest impls for use in downstream crates (#1092) 2020-09-23 18:52:52 -07:00
serialization.rs chain: touch up docs 2020-08-17 11:46:34 -07:00
shutdown.rs Fix shutdown panics (#1637) 2021-02-03 19:03:28 +10:00
sprout.rs export proptest impls for use in downstream crates (#1092) 2020-09-23 18:52:52 -07:00
transaction.rs change the mandatory checkpoint to Canopy 2021-03-18 10:13:47 +10:00
transparent.rs chain: add custom Debug for CoinbaseData 2020-11-21 14:09:15 -05:00
work.rs export proptest impls for use in downstream crates (#1092) 2020-09-23 18:52:52 -07:00