Open jonastheis opened 1 month ago
[!IMPORTANT]
Review skipped
Draft detected.
Please check the settings in the CodeRabbit UI or the
.coderabbit.yaml
file in this repository. To trigger a single review, invoke the@coderabbitai review
command.You can disable this status message by setting the
reviews.review_status
tofalse
in the CodeRabbit configuration file.
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?
Semgrep found 1 ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2
finding:
Risk: Affected versions of golang.org/x/net, golang.org/x/net/http2, and net/http are vulnerable to Uncontrolled Resource Consumption. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
Fix: Upgrade this library to at least version 0.23.0 at go-ethereum/go.mod:145.
Reference(s): https://github.com/advisories/GHSA-4v7x-pqxf-cx7m, CVE-2023-45288
Ignore this finding from ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2.
1. Purpose or design rationale of this PR
This PR implements a recovery mode after batches have been submitted permissionlessly in the context of permissionless batches. During permissionless mode the L2 network will not produce any valid/canonical L2 chain. Batches can be submitted by anyone directly to the L1.
This PR extends the
L1 follower mode
to be able to recover state from any given L1 block height--da.recovery.initiall1block
and batch index--da.recovery.initialbatch
to a given L2 end block--da.recovery.l2endblock
, while overriding any existing local state of the node.Additionally, it allows to re-sign the read blocks with
--da.recovery.signblocks
so that once the sequencer comes back online a valid canonical L2 chain can again be created from the permissionless committed batches.2. PR title
Your PR title must follow conventional commits (as we are doing squash merge for each PR), so it must start with one of the following types:
3. Deployment tag versioning
Has the version in
params/version.go
been updated?4. Breaking change label
Does this PR have the
breaking-change
label?