monzero-core.git/src/ringct, branch v0.17.2.0Monzero core node, command-line wallet, consensus code, and release tooling.
https://code.monzero.org/monzero-core.git/atom?h=v0.17.2.02021-03-18T20:57:13ZFixed issues found by static analysis2021-03-18T20:57:13ZSChernykhsergey.v.chernykh@gmail.com2021-03-18T20:57:13Zurn:sha1:9ca9f1214a1da15001736246dc1f00b22c930bdd
- rolling_median: tried to free uninitialized pointer in a constructor
- net_node.inl: erase-remove idiom was used incorrectly. remove_if doesn't actually remove elements, see http://cpp.sh/6fcjv
- bulletproofs.cc: call to sizeof() instead of vector.size(), luckily it only impacts performance and not code logic there
fix a couple bugs found by OSS-fuzz2020-09-24T15:33:40Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-09-24T15:16:44Zurn:sha1:9e6187a736ce8a7284683a42da757715da3b22f8
- index out of bounds when importing outputs
- accessing invalid CLSAG data
Merge pull request #67572020-09-03T17:25:59Zluigi1111luigi1111w@gmail.com2020-09-03T17:25:59Zurn:sha1:ee0b02d0dbdafebd28aa535baae086f8d481d191
6a37da8 threadpool: guard against exceptions in jobs, and armour plating (moneromooo-monero)
threadpool: guard against exceptions in jobs, and armour plating2020-09-01T14:33:33Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-08-12T22:13:29Zurn:sha1:6a37da837e1c936200f8d71a142973cc60b17b32
Those would, if uncaught, exit run and leave the waiter to wait
indefinitely for the number of active jobs to reach 0
ringct: fix CLSAG serialization after boost/epee changes2020-08-28T11:52:54Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-08-28T11:52:54Zurn:sha1:e6c81c5ea7b06eaf19ce1e4c4294b09f4c6faf50
also fix a an assert message refering t MLSAG
CLSAG device support2020-08-27T12:44:04ZSarang Noether32460187+SarangNoether@users.noreply.github.com2020-03-27T19:29:32Zurn:sha1:703944c4d4faf6ad86a69ec3808a87b20ce76a32CLSAG optimizations2020-08-27T12:44:04ZSarang Noether32460187+SarangNoether@users.noreply.github.com2020-03-10T22:46:37Zurn:sha1:641b08c920f9c68d957e13147cf9c3e329cf83f1Integrate CLSAGs into monero2020-08-27T12:44:04Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2019-06-09T13:02:16Zurn:sha1:82ee01699c2b910e44fd7362bd47d3a1cc9c26af
They are allowed from v12, and MLSAGs are rejected from v13.
CLSAG signatures2020-08-27T12:43:29ZSarang Noether32460187+SarangNoether@users.noreply.github.com2019-08-29T11:35:12Zurn:sha1:4b328c66161d11ddb240ca9c10298b0581aaa6b5replace most boost serialization with existing monero serialization2020-08-17T16:23:58Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-06-24T23:26:58Zurn:sha1:7175dcb1078abbdaa130a8c5f5fd2b93fa7b3086
This reduces the attack surface for data that can come from
malicious sources (exported output and key images, multisig
transactions...) since the monero serialization is already
exposed to the outside, and the boost lib we were using had
a few known crashers.
For interoperability, a new load-deprecated-formats wallet
setting is added (off by default). This allows loading boost
format data if there is no alternative. It will likely go
at some point, along with the ability to load those.
Notably, the peer lists file still uses the boost serialization
code, as the data it stores is define in epee, while the new
serialization code is in monero, and migrating it was fairly
hairy. Since this file is local and not obtained from anyone
else, the marginal risk is minimal, but it could be migrated
later if needed.
Some tests and tools also do, this will stay as is for now.