Skip to content
This repository has been archived by the owner on Nov 15, 2023. It is now read-only.

Verify signature and session index during apply phase of im-online. #3418

Merged
merged 4 commits into from
Aug 16, 2019

Conversation

tomusdrw
Copy link
Contributor

Closes: #3091

We can't rely on checks done in validate_unsigned, since they are only done for the transaction pool and during regular execution (i.e. apply_extrinsic) we really need to perform them again, to prevent a malicious actor creating a block with such invalid extrinsic.

Since the testing boilerplate for im-online is non-existent in master I'll add a test for this after #3322 is merged.

@tomusdrw tomusdrw added A0-please_review Pull request needs code review. M4-core labels Aug 16, 2019
@andresilva
Copy link
Contributor

Bump impl_version and merge it after CI passes :)

@andresilva andresilva added A8-looksgood and removed A0-please_review Pull request needs code review. labels Aug 16, 2019
@tomusdrw tomusdrw requested review from andresilva and bkchr August 16, 2019 10:34
@tomusdrw
Copy link
Contributor Author

I've added a bunch of additional docs to SignedExtension since it can be used to validate unsigned transactions as well.

@gavofyork gavofyork merged commit 755a6c4 into master Aug 16, 2019
@gavofyork gavofyork deleted the td-validate-unsigned branch August 16, 2019 10:59
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Unsigned transactions not validated during Executive::apply_extrinsic
4 participants