Skip to content

types: reject light client attack evidence without a signed header - #65

Merged
tqin7 merged 1 commit into
dydx-fork-v0.38.5from
tq/evidence-nil-signed-header
Oct 28, 2026
Merged

tqin7 merged 1 commit into
dydx-fork-v0.38.5from
tq/evidence-nil-signed-header

Conversation

@tqin7

@tqin7 tqin7 commented Oct 28, 2026 •

Copy link
Copy Markdown
Collaborator

Rebase of #59 onto the current dydx-fork-v0.38.5 tip, unchanged.

LightClientAttackEvidence.ValidateBasic checked ConflictingBlock for nil but then read ConflictingBlock.Header, a field promoted through the embedded *SignedHeader, so evidence whose conflicting_block.signed_header is omitted dereferenced nil. The same check was added upstream in cometbft#5757. Evidence received over the evidence channel is recovered by MConnection, but the block validation path is not, so this applies to proposed blocks as well as gossip.

@tqin7
tqin7 merged commit 67cc764 into dydx-fork-v0.38.5 Oct 28, 2026
14 of 15 checks passed
@tqin7
tqin7 deleted the tq/evidence-nil-signed-header branch October 28, 2026 20:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants