ARCHIVE/rippled
1
0
Fork 0
mirror of https://github.com/XRPLF/rippled.git synced 2026-04-29 15:37:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add requireAuth invariant

Browse Source
This commit is contained in:
Gregory Tsipenyuk
2026-04-13 15:22:49 -04:00
parent 5439264bdb
commit a2ab6c79ac
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/libxrpl/tx/invariants/MPTInvariant.cpp
View File

@@ -438,6 +438,7 @@ ValidMPTTransfer::finalize(
std::uint16_t senders = 0;
std::uint16_t receivers = 0;
bool frozen = false;
bool reqAuth = false;
auto const sleIssuance = view.read(keylet::mptIssuance(mptID));
if (!sleIssuance)
{
@@ -457,6 +458,10 @@ ValidMPTTransfer::finalize(
if (!value.amtBefore.has_value() || *value.amtAfter > *value.amtBefore)
{
++receivers;
if (!reqAuth && !isTesSuccess(requireAuth(view, MPTIssue{mptID}, account)))
{
reqAuth = true;
}
}
else
{
@@ -475,7 +480,8 @@ ValidMPTTransfer::finalize(
// A transfer between holders has occurred (senders > 0 && receivers > 0).
// Fail if the issuance is frozen, does not permit transfers, or — for
// DEX transactions — does not permit trading.
if ((frozen || !canTransfer || (isDEX && !canTrade)) && senders > 0 && receivers > 0)
if (((frozen || !canTransfer || (isDEX && !canTrade)) && senders > 0 && receivers > 0) ||
reqAuth)
{
JLOG(j.fatal()) << "Invariant failed: invalid MPToken transfer between holders";
return enforce;