Add MPTAmount overflow check in directSendNoFeeMPT().

2026-04-29 15:37:57 +00:00 · 2026-04-23 13:13:17 -04:00
parent 00f39cdd9c
commit ddc419daaf
1 changed files with 7 additions and 0 deletions
--- a/src/libxrpl/ledger/helpers/TokenHelpers.cpp
+++ b/src/libxrpl/ledger/helpers/TokenHelpers.cpp
@@ -1106,6 +1106,13 @@ directSendNoFeeMPT(
        if (auto sle = view.peek(mptokenID))
        {
            view.creditHookMPT(uSenderID, uReceiverID, saAmount, (*sle)[sfMPTAmount], available);
+            if (view.rules().enabled(featureMPTokensV2))
+            {
+                if ((*sle)[sfMPTAmount] > (std::numeric_limits<std::uint64_t>::max() - amt))
+                {
+                    return tecINTERNAL;  // LCOV_EXCL_LINE
+                }
+            }
            (*sle)[sfMPTAmount] += amt;
            view.update(sle);
        }