Does not check for signer privilege escalation

jet-lab / jet-simulation

An in-memory simulated Solana runtime to use for testing program instructions.

GNU Affero General Public License v3.0

0 stars 0 forks source link

Does not check for signer privilege escalation #3

Open dnut opened 2 years ago

dnut commented 2 years ago

accounting_invoke in margin escalated the margin account signer permission by setting is_signer to true in the account meta but not actually signing it with invoke_signed. solana_test_validator catches this and fails the ix with "signer privilege escalated" but the simulated runtime doesn't care about it.

in jet_v2 it currently has this bug - it sets the signer to true, but i'm fixing it in the orca branch.

nevi-me commented 2 years ago

I couldn't quite figure out what was happening when I did this in another adapter's branch