Open moodyjon opened 2 years ago
Thanks for pointing this out, this appears to be a race condition in the tests (it is not a vulnerability, just a bug) - these commits are working towards fixing it:
https://github.com/lbryio/hub/pull/57/commits/8fe3e0915df62a0b7dff67d7d3368938b4e0a69e https://github.com/lbryio/lbry-sdk/commit/cdb9480e89725ef9b171b132bcaf7726fdf9f93c
It seems this is a vulnerability in the
es_writer.start()
where it can fail if interleaved with a task adding new block(s) (e.g.create_task(self.generate(N))
). Hence filing against lbryio/hub.Test Code:
https://github.com/lbryio/lbry-sdk/blob/8becf1f69f38019c8c1d0ac6fbba80897f94c8ed/tests/integration/blockchain/test_wallet_server_sessions.py#L126
Failure:
Examples: https://github.com/lbryio/lbry-sdk/runs/6944766671?check_suite_focus=true#step:11:686 https://github.com/lbryio/lbry-sdk/runs/6846528407?check_suite_focus=true#step:11:499 https://github.com/lbryio/lbry-sdk/runs/6846200096?check_suite_focus=true#step:11:469