rpc: restrict add_aux_pow

(cherry picked from commit 644a73867fd43420dccfe22a6cb421ac1aee7c54)
This commit is contained in:
hinto.janai
2026-05-05 18:20:53 -04:00
committed by jwinterm
parent 4cbc74bed0
commit a5b524a030
+10 -1
View File
@@ -2065,6 +2065,15 @@ namespace cryptonote
if (use_bootstrap_daemon_if_necessary<COMMAND_RPC_ADD_AUX_POW>(invoke_http_mode::JON_RPC, "add_aux_pow", req, res, r))
return r;
const bool restricted = m_restricted && ctx;
if (restricted && req.aux_pow.size() > 10)
{
error_resp.code = CORE_RPC_ERROR_CODE_RESTRICTED;
error_resp.message = "Too many aux pow hashes";
return false;
}
if (req.aux_pow.empty())
{
error_resp.code = CORE_RPC_ERROR_CODE_WRONG_PARAM;
@@ -2100,7 +2109,7 @@ namespace cryptonote
while ((1u << path_domain) < aux_pow.size())
++path_domain;
uint32_t nonce;
const uint32_t max_nonce = 65535;
const uint32_t max_nonce = restricted ? 16384 : 65535;
bool collision = true;
for (nonce = 0; nonce <= max_nonce; ++nonce)
{