Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Merged by Bors] - Verify that previous ATX points to correct ATX when handling incoming ATXs #5927

Closed
wants to merge 35 commits into from

Conversation

fasmat
Copy link
Member

@fasmat fasmat commented May 10, 2024

Motivation

This integrates the changes from the CVE fix into the main development branch.

Closes #5692

Description

For details see: GHSA-jcqq-g64v-gcm7

Test Plan

Tests have been added to verify new / changed code.

TODO

  • Explain motivation or link existing issue(s)
  • Test changes and document test plan
  • Update documentation as needed
  • Update changelog as needed

fasmat and others added 9 commits April 29, 2024 15:08
Another round of increasing limits to support more ATXs per epoch.
All identities within the node register in the same poets so there's no need to fetch the proof many times.
It avoids duplicated work to look up a positioning ATX and verify its chain.
## Motivation

Follow up to #5821. Add `.netrc` creation to workflow for creating docker release images
… ATXs (#27)

---------

Co-authored-by: Bartosz Różański <bartek.roza@gmail.com>
* Fix ATX handling of double initial ATXs
Copy link

codecov bot commented May 17, 2024

Codecov Report

Attention: Patch coverage is 69.28571% with 86 lines in your changes are missing coverage. Please review.

Project coverage is 80.8%. Comparing base (3ed6d3d) to head (ff55625).

Files Patch % Lines
activation/handler_v1.go 76.1% 18 Missing and 12 partials ⚠️
activation/verify_state.go 54.1% 15 Missing and 7 partials ⚠️
malfeasance/wire/malfeasance.go 20.0% 19 Missing and 1 partial ⚠️
node/node.go 0.0% 5 Missing and 1 partial ⚠️
sql/atxs/atxs.go 85.3% 3 Missing and 3 partials ⚠️
events/events.go 0.0% 2 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff            @@
##           develop   #5927     +/-   ##
=========================================
- Coverage     80.8%   80.8%   -0.1%     
=========================================
  Files          286     287      +1     
  Lines        29714   29905    +191     
=========================================
+ Hits         24035   24182    +147     
- Misses        4117    4139     +22     
- Partials      1562    1584     +22     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@fasmat
Copy link
Member Author

fasmat commented May 17, 2024

bors try

spacemesh-bors bot added a commit that referenced this pull request May 17, 2024
@fasmat fasmat requested a review from poszu May 21, 2024 09:59
@fasmat
Copy link
Member Author

fasmat commented May 21, 2024

bors merge

spacemesh-bors bot pushed a commit that referenced this pull request May 21, 2024
… ATXs (#5927)

## Motivation

This integrates the changes from the CVE fix into the main development branch.

Closes #5692



Co-authored-by: Bartosz Różański <bartek.roza@gmail.com>
@spacemesh-bors
Copy link

Build failed (retrying...):

@spacemesh-bors
Copy link

Canceled.

@fasmat
Copy link
Member Author

fasmat commented May 21, 2024

bors merge

@spacemesh-bors
Copy link

Merge conflict.

@fasmat
Copy link
Member Author

fasmat commented May 21, 2024

bors merge

spacemesh-bors bot pushed a commit that referenced this pull request May 21, 2024
… ATXs (#5927)

## Motivation

This integrates the changes from the CVE fix into the main development branch.

Closes #5692



Co-authored-by: Bartosz Różański <bartek.roza@gmail.com>
@spacemesh-bors
Copy link

Build failed:

@fasmat
Copy link
Member Author

fasmat commented May 21, 2024

test timeout

bors merge

spacemesh-bors bot pushed a commit that referenced this pull request May 21, 2024
… ATXs (#5927)

## Motivation

This integrates the changes from the CVE fix into the main development branch.

Closes #5692



Co-authored-by: Bartosz Różański <bartek.roza@gmail.com>
@spacemesh-bors
Copy link

Pull request successfully merged into develop.

Build succeeded:

@spacemesh-bors spacemesh-bors bot changed the title Verify that previous ATX points to correct ATX when handling incoming ATXs [Merged by Bors] - Verify that previous ATX points to correct ATX when handling incoming ATXs May 21, 2024
@spacemesh-bors spacemesh-bors bot closed this May 21, 2024
@spacemesh-bors spacemesh-bors bot deleted the cve-fix-integration branch May 21, 2024 20:38
spacemesh-bors bot pushed a commit that referenced this pull request May 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

contextually invalid atx is stored in the state and used for consensus
2 participants