nihilist/monero
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
8,336 Commits 10 Branches 68 Tags 223 MiB
a00cabd4f3
Commit Graph

8336 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
moneromooo-monero
a00cabd4f3
tree-hash: allocate variable memory on heap, not stack 
Large amounts might run out of stack

Reported by guidov
 2019-06-14 08:47:20 +00:00
moneromooo-monero
f215219252
cryptonote: throw on tx hash calculation error 2019-06-14 08:47:17 +00:00
moneromooo-monero
db2b9fba65
serialization: fail on read_varint error 2019-06-14 08:47:14 +00:00
moneromooo-monero
68ad548193
cryptonote_protocol: fix another potential P2P DoS 
When asking for txes in a fluffy transaction, one might ask
for the same (large) tx many times
 2019-06-14 08:47:11 +00:00
moneromooo-monero
1cc61018e5
cryptonote_protocol: expand basic DoS protection 
Count transactions as well
 2019-06-14 08:47:08 +00:00
anonimal
8f66b7053a
cryptonote_protocol_handler: prevent potential DoS 
Essentially, one can send such a large amount of IDs that core exhausts
all free memory. This issue can theoretically be exploited using very
large CN blockchains, such as Monero.

This is a partial fix. Thanks and credit given to CryptoNote author
'cryptozoidberg' for collaboration and the fix. Also thanks to
'moneromooo'. Referencing HackerOne report #506595.
 2019-06-14 08:47:05 +00:00
moneromooo-monero
39169ace09
epee: basic sanity check on allocation size from untrusted source 
Reported by guidov
 2019-06-14 08:47:01 +00:00
luigi1111
7b3df89bd4
Merge pull request #5632 
3a0fbea Don't use -march=native (hyc)
f8b2f25 Allow parallel make (hyc)
01ced20 Delete redundant cppzmq dependency (hyc)
1dc4ebf Use 9 digit build IDs (hyc)
 2019-06-12 14:47:33 -05:00
luigi1111
a22bb544a3
Merge pull request #5552 
c27d961 [depends] update openssl to 1.0.2r (who-biz)
 2019-06-12 14:43:51 -05:00
Howard Chu
1dc4ebfd6c
Use 9 digit build IDs 2019-06-12 16:47:33 +01:00
Howard Chu
01ced20eca
Delete redundant cppzmq dependency 2019-06-12 10:20:44 +01:00
Howard Chu
f8b2f250b7
Allow parallel make 2019-06-12 09:00:50 +01:00
Howard Chu
3a0fbea1ff
Don't use -march=native 2019-06-12 09:00:44 +01:00
luigi1111
fd0cf689dd
Merge pull request #5619 
f2f207d miner: fix double free of thread attributes (ston1th)
 2019-06-11 18:17:11 -05:00
luigi1111
9c0e9c40ec
Merge pull request #5618 
b0a04f7 epee: fix SSL autodetect on reconnection (xiphon)
 2019-06-11 18:15:48 -05:00
luigi1111
425e61ca6d
Merge pull request #5616 
643c86a miniupnpc: update to build on BSD (moneromooo-monero)
 2019-06-11 18:14:17 -05:00
luigi1111
c48722caa9
Merge pull request #5613 
2cbe756 p2p: fix GCC 9.1 crash (moneromooo-monero)
35c20c4 Fix GCC 9.1 build warnings (moneromooo-monero)
e284889 cmake: do not use -mmitigate-rop on GCC >= 9.1 (moneromooo-monero)
 2019-06-11 18:13:09 -05:00
xiphon
b0a04f7d45 epee: fix SSL autodetect on reconnection 2019-06-10 10:40:16 +00:00
moneromooo-monero
e2848894c9
cmake: do not use -mmitigate-rop on GCC >= 9.1 
It was removed, but it still accepted by the compiler, which warns
for every file
 2019-06-09 09:40:47 +00:00
moneromooo-monero
35c20c4332
Fix GCC 9.1 build warnings 
GCC wants operator= aand copy ctor to be both defined, or neither
 2019-06-09 09:39:18 +00:00
ston1th
f2f207d635 miner: fix double free of thread attributes 
issue: #5568
 2019-06-09 10:51:18 +02:00
moneromooo-monero
643c86a62a
miniupnpc: update to build on BSD 2019-06-08 18:38:51 +00:00
moneromooo-monero
2cbe75661c
p2p: fix GCC 9.1 crash 2019-06-08 17:52:53 +00:00
Riccardo Spagni
51766d026b
Merge pull request #5583 
77594c4f functional_tests: fix python3 compatibility (moneromooo-monero)
 2019-06-01 20:27:41 +02:00
Riccardo Spagni
62d32e955a
Merge pull request #5577 
f950517a core: update pruning if using --prune-blockchain on a pruned blockchain (moneromooo-monero)
 2019-06-01 20:25:19 +02:00
Riccardo Spagni
7e417dd408
Merge pull request #5571 
35da33be blockchain: do not try to pop blocks down to the genesis block (moneromooo-monero)
4b51f9a3 core: do not commit half constructed batch db txn (moneromooo-monero)
 2019-06-01 20:22:19 +02:00
Riccardo Spagni
14d3295649
Merge pull request #5561 
9bfa4c20 Fix allow any cert mode in wallet rpc when configured over rpc (Lee Clagett)
3544596f Add ssl_options support to monerod's rpc mode. (Lee Clagett)
c9aaccf3 Fix configuration bug; wallet2 --daemon-ssl-allow-any-cert now works. (Lee Clagett)
 2019-06-01 20:21:45 +02:00
Riccardo Spagni
42e2ed31ae
Merge pull request #5558 
4ac52e52 functional_tests: fix rare get_output_distribution failure (moneromooo-monero)
 2019-06-01 20:21:22 +02:00
Riccardo Spagni
df20bcdac5
Merge pull request #5557 
dbecfe7d unit_tests: make the density test a bit less stringent (moneromooo-monero)
 2019-06-01 20:21:03 +02:00
Riccardo Spagni
fccfc1aa25
Merge pull request #5555 
b6830db2 Fix #5553 (Howard Chu)
 2019-06-01 20:20:39 +02:00
moneromooo-monero
77594c4f4a
functional_tests: fix python3 compatibility 
Also add missing bans test to the default tests
 2019-05-29 11:59:48 +00:00
moneromooo-monero
f950517a08
core: update pruning if using --prune-blockchain on a pruned blockchain 
Avoids a massive amount of spurious warnings if the last update before
the daemon exited was a while ago and the daemon was syncing
 2019-05-28 09:12:11 +00:00
moneromooo-monero
35da33bea9
blockchain: do not try to pop blocks down to the genesis block 2019-05-26 17:11:32 +00:00
moneromooo-monero
4b51f9a34f
core: do not commit half constructed batch db txn 2019-05-25 16:24:56 +00:00
Lee Clagett
9bfa4c20ca Fix allow any cert mode in wallet rpc when configured over rpc 2019-05-22 00:15:14 -04:00
Lee Clagett
3544596f9f Add ssl_options support to monerod's rpc mode. 2019-05-22 00:09:11 -04:00
Lee Clagett
c9aaccf346 Fix configuration bug; wallet2 --daemon-ssl-allow-any-cert now works. 2019-05-21 15:43:27 -04:00
moneromooo-monero
4ac52e523d
functional_tests: fix rare get_output_distribution failure 
When the wallet auto refreshes after mining the last two blocks
but before popping them, it will then try to use outputs which
are not unlocked yet. This is really a wallet problem, which
will be fixed later.
 2019-05-20 13:45:36 +00:00
moneromooo-monero
dbecfe7d5d
unit_tests: make the density test a bit less stringent 
It's an inherently random test
 2019-05-20 10:42:50 +00:00
Howard Chu
b6830db2d4
Fix #5553 
Make sure the tip hash still matches the cached block
 2019-05-19 03:02:33 +01:00
who-biz
c27d96129e [depends] update openssl to 1.0.2r 
- This addresses https://www.openssl.org/news/secadv/20190226.txt (CVE: 2019-1559) which impacted all versions of openssl-1.0.

Note that this does not address CVE-2019-1543 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1543), which impacts all versions of openssl 1.1 through 1.1.0j and 1.1.1b.

The above (1.1) is patched in openssl, where it was marked as low severity.  Similar issues possibly present in monero, should be looked into w.r.t. CVE-2019-1543.
 2019-05-18 02:18:55 -04:00
Riccardo Spagni
5fbfa8a656
Merge pull request #5548 
915f59e3 wallet: add unlock_time details to show_transfers (moneromooo-monero)
 2019-05-17 13:17:40 +02:00
moneromooo-monero
915f59e3c0
wallet: add unlock_time details to show_transfers 
also add a note when receiving the tx, because the user
might not notice the "XXX blocks to unlock" in the balance.
 2019-05-16 21:37:05 +00:00
Riccardo Spagni
e8487fa46b
Merge pull request #5539 
3f612cda Changed odd bullet point to low level header (Rohaq)
af9bc4ec Used subeaders to avoid slightly wonky looking formatting (Rohaq)
1873af35 Made code block usage consistent across all .md files (Rohaq)
68103075 Updated Copyright notice (Rohaq)
39bd157f Added Table of Contents to main README.md (Rohaq)
 2019-05-15 16:10:41 +02:00
Riccardo Spagni
5e80b3c3ef
Merge pull request #5535 
e1016bce password: do not use line input on windows (moneromooo-monero)
 2019-05-15 16:06:58 +02:00
luigi1111
1607419e38
Merge pull request #5538 
615f287 wallet: fix certificate fingerprint length check (moneromooo-monero)
 2019-05-14 16:02:59 -05:00
luigi1111
eedf5106f5
Merge pull request #5532 
46244dd wallet_rpc_server: use original addresses in destinations in get_transfers (moneromooo-monero)
 2019-05-14 15:59:34 -05:00
luigi1111
14723fc6e7
Merge pull request #5527 
9a7a453 net_ssl: free certs after setting them up (moneromooo-monero)
 2019-05-14 15:55:25 -05:00
luigi1111
5a67ff2b32
Merge pull request #5526 
1e8f3f6 rpc: fail update RPC when running offline (moneromooo-monero)
 2019-05-14 15:54:10 -05:00
luigi1111
1fc1c7318c
Merge pull request #5519 
b8b957d cmake: fix incorrect hint for OPENSSL_ROOT_DIR (moneromooo-monero)
367bb80 mlog: default to not showing SSL errors (moneromooo-monero)
 2019-05-14 15:52:32 -05:00