monzero-core.git, branch v0.14.1.0Monzero core node, command-line wallet, consensus code, and release tooling.
https://code.monzero.org/monzero-core.git/atom?h=v0.14.1.02019-06-14T14:09:16ZMerge pull request #56382019-06-14T14:09:16ZRiccardo Spagniric@spagni.net2019-06-14T14:09:16Zurn:sha1:29a505d1c1cfd3baa7d3a0c4433db8d7b043e341
6ed1679b prep for 0.14.1 release (Riccardo Spagni)
Merge pull request #56402019-06-14T14:08:59ZRiccardo Spagniric@spagni.net2019-06-14T14:08:58Zurn:sha1:c58255ec12491dbc4d8c363280ede7869f447bf9
542cab02 rpc: restrict the recent cutoff size in restricted RPC mode (moneromooo-monero)
434e617a ensure no NULL is passed to memcpy (moneromooo-monero)
279f1f2c abstract_tcp_server2: improve DoS resistance (moneromooo-monero)
756773e5 serialization: check stream good flag at the end (moneromooo-monero)
e3f714aa tree-hash: allocate variable memory on heap, not stack (moneromooo-monero)
67baa3a6 cryptonote: throw on tx hash calculation error (moneromooo-monero)
d6bb9ecc serialization: fail on read_varint error (moneromooo-monero)
19490e44 cryptonote_protocol: fix another potential P2P DoS (moneromooo-monero)
fa4aa47e cryptonote_protocol: expand basic DoS protection (moneromooo-monero)
3c953d53 cryptonote_protocol_handler: prevent potential DoS (anonimal)
b873b69d epee: basic sanity check on allocation size from untrusted source (moneromooo-monero)
rpc: restrict the recent cutoff size in restricted RPC mode2019-06-14T08:48:27Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-05-12T13:27:34Zurn:sha1:542cab02e1cc1acba09c4759826ef57bbd6c2191ensure no NULL is passed to memcpy2019-06-14T08:48:25Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-04-29T08:17:32Zurn:sha1:434e617a1d7f2f6f6b4507ada00f9ab69d0bd27e
NULL is valid when size is 0, but memcpy uses nonnull attributes,
so let's not poke the bear
abstract_tcp_server2: improve DoS resistance2019-06-14T08:48:22Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-04-20T12:24:29Zurn:sha1:279f1f2c263e3a77b20eacf199d531b4a8a2cc78serialization: check stream good flag at the end2019-06-14T08:48:19Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-04-16T18:48:40Zurn:sha1:756773e5fe79f970a36615cc178be09aedf4a915
just in case
tree-hash: allocate variable memory on heap, not stack2019-06-14T08:48:16Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-04-04T00:15:07Zurn:sha1:e3f714aa2aee5f4a52671de30f48911edf042ea9
Large amounts might run out of stack
Reported by guidov
cryptonote: throw on tx hash calculation error2019-06-14T08:48:13Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-03-19T01:07:10Zurn:sha1:67baa3a66b07f5b6320911eed49ca91e2a5d037aserialization: fail on read_varint error2019-06-14T08:48:10Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-03-11T23:36:17Zurn:sha1:d6bb9ecc6fe618840417df45f750dfb584cb549ecryptonote_protocol: fix another potential P2P DoS2019-06-14T08:48:07Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-03-09T09:08:53Zurn:sha1:19490e44af187d5afe6fed7b23de468408c7896b
When asking for txes in a fluffy transaction, one might ask
for the same (large) tx many times