HomePhabricator

Alert system DoS prevention
d5a52d9b3edaUnpublished

Unpublished Commit ยท Learn More

Repository Importing: This repository is still importing.

Description

Alert system DoS prevention

This fixes two alert system vulnerabilities found by
Sergio Lerner; you could send peers unlimited numbers
of invalid alert message to try to either fill up their
debug.log with messages and/or keep their CPU busy
checking signatures.

Fixed by disconnecting/banning peers if they send 10 or more
bad (invalid/expired/cancelled) alerts.

Details

Provenance
Gavin Andresen <gavinandresen@gmail.com>Authored on Aug 26 2012, 21:08
schancelPushed on Jan 5 2018, 21:58
schancelPushed on Jan 5 2018, 21:39
schancelPushed on Jan 5 2018, 21:17
Parents
rSTAGING772351b0d5b2: Merge branch '2012_08_progressbarwin' of git://github.com/laanwj/bitcoin
Branches
Unknown
Tags
Unknown

Event Timeline

Gavin Andresen <gavinandresen@gmail.com> committed rSTAGINGd5a52d9b3eda: Alert system DoS prevention (authored by Gavin Andresen <gavinandresen@gmail.com>).Aug 26 2012, 21:08