umbracle / ethgo

Ethereum Golang API
https://www.ethgoproject.io
Mozilla Public License 2.0
484 stars 135 forks source link

[DoS] fix potential index out of range in txn unmarshalling #203

Closed shouc closed 2 years ago

shouc commented 2 years ago

This is a critical DoS issue because multiple blockchain projects are using this to parse txn gossipped from other nodes or provided by users. Without this fixed, attackers can easily crash blockchain nodes.

vercel[bot] commented 2 years ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated
ethgo ✅ Ready (Inspect) Visit Preview May 23, 2022 at 3:09AM (UTC)
shouc commented 2 years ago

Related PR: https://github.com/umbracle/fastrlp/pull/7