diff options
| author | Jaquee <jaquee.monero@gmail.com> | 2017-08-11 11:18:21 +0200 |
|---|---|---|
| committer | Jaquee <jaquee.monero@gmail.com> | 2017-08-11 11:18:21 +0200 |
| commit | 359517c7f5fc4c060e470c674b477e7a65f8d514 (patch) | |
| tree | a96a84321e1872660bdec6274c49af36488860ee | |
| parent | 20495b27e851439e4ea7e7036234de3717f5d5c0 (diff) | |
| download | monzero-core-359517c7f5fc4c060e470c674b477e7a65f8d514.tar.gz monzero-core-359517c7f5fc4c060e470c674b477e7a65f8d514.tar.xz monzero-core-359517c7f5fc4c060e470c674b477e7a65f8d514.zip | |
wallet_rpc_server: fix possible privacy leak in on_import_key_images()
| -rw-r--r-- | src/wallet/wallet_rpc_server.cpp | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/wallet/wallet_rpc_server.cpp b/src/wallet/wallet_rpc_server.cpp index f014c573a..133f93f92 100644 --- a/src/wallet/wallet_rpc_server.cpp +++ b/src/wallet/wallet_rpc_server.cpp @@ -1360,7 +1360,12 @@ namespace tools er.message = "Command unavailable in restricted mode."; return false; } - + if (!m_trusted_daemon) + { + er.code = WALLET_RPC_ERROR_CODE_UNKNOWN_ERROR; + er.message = "This command requires a trusted daemon."; + return false; + } try { std::vector<std::pair<crypto::key_image, crypto::signature>> ski; |