82d21f5b3c
easylogging++: sanitize log payload
...
Some of it might be coming from untrusted sources
Reported by itsunixiknowthis
4 years ago
78d435a5fa
rpc: don't display invalid json errors on default log level
...
It's not something the user needs to know, and will display
attacker controlled data
4 years ago
selsta
2314dae8c8
workflows: fix windows build
4 years ago
a6803231e6
daemon: complain if data dir resides on FAT32 volume (Windows)
4 years ago
4d3c2d0b7b
rpc: add a sanity limit to a few RPC in restricted mode
4 years ago
15538f7e3f
ByteSlice: Fix persisting ptr to std::moved SSO buffer
...
The Bug:
1. Construct `byte_slice.portion_` with `epee::span(buffer)` which copies a pointer to the SSO buffer to `byte_slice.portion_`
2. It constructs `byte_slice.storage_` with `std::move(buffer)` (normally this swap pointers, but SSO means a memcpy and clear on the original SSO buffer)
3. `slice.data()` returns a pointer from `slice.portion_` that points to the original SSO cleared buffer, `slice.storage_` has the actual string.
4 years ago
selsta
1d31e6c000
net_node: remove dead seed nodes
4 years ago
7ebb351c2d
rpc: lock access to the rpc payment object
4 years ago
f0371210e9
cryptonote_core: remove "We are most likely forked" message
...
It's time based and we don't have forks every 6 months anymore
4 years ago
567402c508
protocol: move the "peer claims higher version" warning to debug
...
Because there's a neverending supply of cunts claiming a wrong
version just to say "look at me" I guess
4 years ago
72cdfa4a20
fix a few typos in error messages
...
Reported by adrelanos
4 years ago
c17fe815a2
wallet2: fix multisig data clearing stomping on a vector
4 years ago
f1d0457523
cryptonote_protocol: stricter limit to number of objects requested
...
Reported by xnbya
4 years ago
bb5c5dff15
cryptonote_protocol: reject requests/notifications before handshake
...
Reported by xnbya
4 years ago
ca60d60fea
easylogging++: sanitize log payload
...
Some of it might be coming from untrusted sources
Reported by itsunixiknowthis
4 years ago
bd69e3b37a
testdb: add override in a couple places where it's missing
4 years ago
5ed37ba83c
serialization: fix bad rapidjson api usage
4 years ago
5741b4d74d
blockchain: detect and log bad difficulty calculations
4 years ago
eda1675858
wallet_rpc_server: use unlock_time in suggested confirmations calc
4 years ago
35665df206
protocol: don't drop a connection if we can't get a compatible chain
...
This can now happen if:
- we have a pruned db
- we have not connected to the monero network for a while
- we connect to a node
- that node asks us for history
- we only have a pruned version of the most recent common block
In that case, it's better to not reply but keep the connection alive,
so we can sync off it.
4 years ago
85164a8daf
epee: use memwipe rather than memset for md5 secrets
...
That's used by HTTP auth now
4 years ago
7178bb5c84
keccak: remove aligned check
...
Some tools report the alignment check as UB, which seems a bit
dubious, but since the performance difference between the two
versions is minimal, I'll go with the safe version
4 years ago
a11ec4ac1d
Support for supercop ASM in wallet, and benchmark for supercop
4 years ago
5e0ea6e95c
simplewallet: add missing calls to on_command
...
It resets the inactivity time
4 years ago
bd96536637
db_lmdb: test for mmap support at init time
...
It'll make it clearer when a DB init failure is due to being
on a filesystem which does not support mmap
4 years ago
cb4edc1f45
cmake: ASAN and PIE don't mix
...
Binaries built with both crash on startup with maybe 25% probability
4 years ago
81773f55a4
fuzz_tests: refactor and add OSS-Fuzz compatibility
4 years ago
67ade80055
Add randomized delay when forwarding txes from i2p/tor -> ipv4/6
4 years ago
selsta
f35ced6d7f
build: fix boost 1.73 compatibility
4 years ago
86cf811a39
simplewallet: don't complain about incoming payment ids on change
4 years ago
153977aed4
libzmq should be libzmq4.
4 years ago
b73f4e78d0
[master]: Update gitian yml files
4 years ago
selsta
4baee200a7
build: prepare v0.16.0.0 release
4 years ago
5d882f4f14
blockchain: fix theoretical race getting bulk timestamps
4 years ago
ab4429346d
trezor: add new firmware version support
4 years ago
29e563bb1e
Fixed bugs for take_slice and byte_stream->byte_slice
4 years ago
8656a8c9ff
remove double includes
4 years ago
77a008f714
Merge pull request #6510
...
70609d7
4 years ago
4c2f78aeeb
Merge pull request #6506
...
42e1484
4 years ago
5ef0607da6
Update copyright year to 2020
...
Update copyright year to 2020
4 years ago
70609d7681
cryptonote_core: take out the time based upgrade warning
...
It doesn't really work anymore since we don't have a fork soon
4 years ago
dbba6004f5
Merge pull request #6503
...
f80ab3e
4 years ago
71693f06a1
systemd: Make sure required folders exist
...
The default monero.conf file depends on the existence of the folders `/var/log/monero/` and `/var/lib/monero/`.
This change makes sure systemd will create them, together with the proper permissions, if they don't exist.
`StateDirectory` can be considered an extra safety in case the user `monero` happens to have been created with specifying `/var/lib/monero/` as a home folder but without actually creating it.
4 years ago
f80ab3edde
cryptonote_protocol: do not request pruned borromean sig txes
...
We don't have a function to calculate their weight from a pruned
version (yet).
4 years ago
f2c78f6a5b
Merge pull request #6486
...
feee455
4 years ago
3de804f1e9
Merge pull request #6485
...
7a8c1ee
4 years ago
98e3802b26
Merge pull request #6484
...
e7d0105
4 years ago
de025281dc
Merge pull request #6481
...
119f706
4 years ago
9e3f72c375
Merge pull request #6480
...
4f489fa
4 years ago
0f233c6ad8
Merge pull request #6478
...
ee58362
4 years ago
moneromooo-monero
selsta
xiphon
Doyle
Lee Clagett
russoj88
iDunk5400
Dusan Klinec
sumogr
luigi1111
SomaticFanatic
Age Bosma