go-ethereum/p2p
Felix Lange 817a3fb562
p2p/enode: avoid crashing for invalid IP (#21981)
The database panicked for invalid IPs. This is usually no problem
because all code paths leading to node DB access verify the IP, but it's
dangerous because improper validation can turn this panic into a DoS
vulnerability. The quick fix here is to just turn database accesses
using invalid IP into a noop. This isn't great, but I'm planning to
remove the node DB for discv5 long-term, so it should be fine to have
this quick fix for half a year.

Fixes #21849
2020-12-09 20:21:31 +01:00
..
discover p2p/discover: fix deadlock in discv5 message dispatch (#21858) 2020-11-25 22:16:36 +01:00
discv5 p2p/discv5: unset pingEcho on pong timeout (#21324) 2020-07-13 11:20:47 +02:00
dnsdisc all: fix typos in comments (#21118) 2020-05-25 10:21:28 +02:00
enode p2p/enode: avoid crashing for invalid IP (#21981) 2020-12-09 20:21:31 +01:00
enr core/forkid: implement the forkid EIP, announce via ENR (#19738) 2019-07-08 18:53:47 +03:00
nat all: simplify nested complexity and if blocks ending with a return statement (#21854) 2020-11-25 09:24:50 +01:00
netutil p2p/discover: implement v5.1 wire protocol (#21647) 2020-10-14 12:28:17 +02:00
nodestate p2p/nodestate: fix deadlock during shutdown of les server (#21927) 2020-11-30 18:58:47 +01:00
rlpx p2p: move rlpx into separate package (#21464) 2020-09-22 10:17:39 +02:00
simulations all: simplify nested complexity and if blocks ending with a return statement (#21854) 2020-11-25 09:24:50 +01:00
dial_test.go p2p: new dial scheduler (#20592) 2020-02-13 11:10:03 +01:00
dial.go p2p: add 0 port check in dialer (#21008) 2020-05-11 18:11:17 +03:00
message_test.go p2p: move rlpx into separate package (#21464) 2020-09-22 10:17:39 +02:00
message.go p2p: measure subprotocol bandwidth usage 2019-09-27 18:00:25 +03:00
metrics.go p2p: remove MeteredPeerEvent (#20679) 2020-02-17 13:22:14 +02:00
peer_error.go p2p: fix some golint warnings (#16577) 2018-05-08 13:08:43 +02:00
peer_test.go p2p: move rlpx into separate package (#21464) 2020-09-22 10:17:39 +02:00
peer.go eth, p2p: use truncated names (#21698) 2020-10-13 13:28:24 +02:00
protocol.go cmd/devp2p, p2p: dial using node iterator, discovery crawler (#20132) 2019-10-29 17:08:57 +02:00
server_test.go p2p: move rlpx into separate package (#21464) 2020-09-22 10:17:39 +02:00
server.go p2p: avoid spinning loop on out-of-handles (#21878) 2020-11-20 15:14:25 +01:00
transport_test.go p2p: move rlpx into separate package (#21464) 2020-09-22 10:17:39 +02:00
transport.go p2p: move rlpx into separate package (#21464) 2020-09-22 10:17:39 +02:00
util_test.go p2p: new dial scheduler (#20592) 2020-02-13 11:10:03 +01:00
util.go p2p: new dial scheduler (#20592) 2020-02-13 11:10:03 +01:00