EspressoSystems / HotShot

http://hotshot.docs.espressosys.com/
MIT License
120 stars 31 forks source link

[AUDIT] Fix `post_identity` endpoint to not allow slot exhaustion #3695

Closed jparr721 closed 3 days ago

jparr721 commented 1 week ago

Closes N/A

This PR:

Changes the post_identity method to utilize a new state variable to record the received (valid) node identifiers, and uses this map as the source of truth for the node_index field. It does not remove tmp_node_index as this is for testing and does not correlate with node_index.

This PR does not:

Key places to review: