monzero-core.git/src, branch v0.14.1.0 Monzero core node, command-line wallet, consensus code, and release tooling. https://code.monzero.org/monzero-core.git/atom?h=v0.14.1.0 2019-06-14T14:09:16Z Merge pull request #5638 2019-06-14T14:09:16Z Riccardo Spagni ric@spagni.net 2019-06-14T14:09:16Z urn:sha1:29a505d1c1cfd3baa7d3a0c4433db8d7b043e341 6ed1679b prep for 0.14.1 release (Riccardo Spagni) rpc: restrict the recent cutoff size in restricted RPC mode 2019-06-14T08:48:27Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-05-12T13:27:34Z urn:sha1:542cab02e1cc1acba09c4759826ef57bbd6c2191 ensure no NULL is passed to memcpy 2019-06-14T08:48:25Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-04-29T08:17:32Z urn:sha1:434e617a1d7f2f6f6b4507ada00f9ab69d0bd27e NULL is valid when size is 0, but memcpy uses nonnull attributes, so let's not poke the bear serialization: check stream good flag at the end 2019-06-14T08:48:19Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-04-16T18:48:40Z urn:sha1:756773e5fe79f970a36615cc178be09aedf4a915 just in case tree-hash: allocate variable memory on heap, not stack 2019-06-14T08:48:16Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-04-04T00:15:07Z urn:sha1:e3f714aa2aee5f4a52671de30f48911edf042ea9 Large amounts might run out of stack Reported by guidov cryptonote: throw on tx hash calculation error 2019-06-14T08:48:13Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-03-19T01:07:10Z urn:sha1:67baa3a66b07f5b6320911eed49ca91e2a5d037a serialization: fail on read_varint error 2019-06-14T08:48:10Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-03-11T23:36:17Z urn:sha1:d6bb9ecc6fe618840417df45f750dfb584cb549e cryptonote_protocol: fix another potential P2P DoS 2019-06-14T08:48:07Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-03-09T09:08:53Z urn:sha1:19490e44af187d5afe6fed7b23de468408c7896b When asking for txes in a fluffy transaction, one might ask for the same (large) tx many times cryptonote_protocol: expand basic DoS protection 2019-06-14T08:48:04Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-03-08T19:17:20Z urn:sha1:fa4aa47ea06d935b41ef028eca9a246eb58bd162 Count transactions as well cryptonote_protocol_handler: prevent potential DoS 2019-06-14T08:48:01Z anonimal anonimal@getmonero.org 2019-03-09T09:11:44Z urn:sha1:3c953d53696d9ccdd195e6a2f02578a154266882 Essentially, one can send such a large amount of IDs that core exhausts all free memory. This issue can theoretically be exploited using very large CN blockchains, such as Monero. This is a partial fix. Thanks and credit given to CryptoNote author 'cryptozoidberg' for collaboration and the fix. Also thanks to 'moneromooo'. Referencing HackerOne report #506595.