GitHub Advisoryadvisory · crates.io
GHSA-q73f-w3h7-7wcc Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
CRITICAL
Official page ↗
- Ecosystem
- crates.io
- Packages
- ckb
- Severity
- Critical
- Reviewed
- 2024-02-03
Affected packages
• crates.io ckb: < 0.34.2 → fixed in 0.34.2
Description
Impact
Tx-pool verify transaction which inputs' script contains `load_cell_data_hash` is nondeterministic
Workarounds
Enforce tx-pool ResolvedTrascation inputs' load data is none.
References
- https://github.com/nervosnetwork/ckb/security/advisories/GHSA-q73f-w3h7-7wcc web
- https://github.com/nervosnetwork/ckb/commit/01eb5b2ecadf7e421b117d6c013e182978746e2f web
- https://github.com/nervosnetwork/ckb/commit/fe83220905599e72c97878295f4769e91348d738 web
- https://github.com/nervosnetwork/ckb/commit/ff88b48779358e038209f3ac1bc1061e6f4deb13 web