mozilla / crlite

WebPKI-level Certificate Revocation via Multi-Level Bloom Filter Cascade
http://www.cs.umd.edu/~dml/papers/crlite_oakland17.pdf
Mozilla Public License 2.0
67 stars 8 forks source link

ct-fetch cannot download from logs with few entries #278

Closed jschanck closed 1 year ago

jschanck commented 1 year ago

ct-fetch tries to download JobSize entries between a firstIndex and a lastIndex. If JobSize is greater than the total number of entries in the log, it suffers a uint64 underflow in the calculation of firstIndex. The log rightfully responds that there are no entries in the requested range. Mostly harmless, but we end up making an invalid request to a CT log roughly every 10 minutes.