ARCHIVE/rippled
1
0
Fork 0
mirror of https://github.com/XRPLF/rippled.git synced 2025-12-06 17:27:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix a vulnerability. Someone could see a ledger proposal and send us a

Browse Source 
malformed version of that ledger proposal that failed our validity check but
was similar enough to the real proposal to trick us into suppressing that
proposal as a duplicate.
This commit is contained in:
JoelKatz
2012-09-01 00:53:40 -07:00
parent 02bd898e51
commit 3bd054748e
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/NetworkOPs.cpp
View File

@@ -607,10 +607,12 @@ bool NetworkOPs::recvPropose(uint32 proposeSeq, const uint256& proposeHash, uint
// XXX Take a vuc for pubkey.
// Get a preliminary hash to use to suppress duplicates
Serializer s(128);
Serializer s(256);
s.add256(proposeHash);
s.add32(proposeSeq);
s.add32(getCurrentLedgerID());
s.add32(closeTime);
s.addRaw(pubKey);
s.addRaw(signature);
if (!theApp->isNew(s.getSHA512Half()))
return false;