Commit Graph
100 Commits
Author SHA1 Message Date
selstaandsuch-gitea 84fd02ea1d wallet2: update multisig info for detached outputs
(cherry picked from commit 48053f75dfed66cbb70aae21a17c5aa00cf3dc88)
2026-10-04 18:50:25 -04:00
selstaandsuch-gitea d86469844e wallet2: trim stale transfer maps after output imports
(cherry picked from commit 7d7a74848780f4f42a0e1376badf62a79240a02f)
2026-10-04 18:50:25 -04:00
selstaandsuch-gitea f607a02dae simplewallet: classify payment IDs by their payload
(cherry picked from commit 7dba0c8c786e44b3c71d1e214bfdf92ae3cf05a1)
2026-10-04 18:50:25 -04:00
selstaandsuch-gitea c7acabc641 wallet2: keep received amount breakdown consistent
(cherry picked from commit 0810f48a24d44f03b917a2548e1588b7531b0301)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea bd0f37cfb3 wallet: fix inconsistent tx pubkey handling
(cherry picked from commit 0125cf2697604cf0657f087fe7c42981d5e0c3b0)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea dfb95d964c wallet2: sanitize untrusted daemon status in sweep unmixable
(cherry picked from commit 144b3f9e644c0b1d4ad994b99edf6c355b38e533)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea 073daa92bd wallet2: filter unchecked RPC error statuses
(cherry picked from commit c86fd739dceca593346ca3d3d3db835d1308e7ed)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea 9a4ec1a5d0 wallet2: validate public node addresses before display
(cherry picked from commit c683bf08850161d6b072fd70c0e1325cb39e0a61)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea cb893bf197 cryptonote_protocol: tighten pruned transaction blob validation
(cherry picked from commit 71e3be0e48d0939dfd2500f703b69234967d254a)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea a53871e588 wallet2: reset scan status for already processed outputs
(cherry picked from commit 357b446a1335db9b42421acff46acaa0dee46a66)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea bfe4de8ea3 cryptonote_core: reject duplicate tx hashes before pool lookup
(cherry picked from commit 03f957c18c8818c3c25b75d771fe48c37036b6e3)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea baf9c8ea5c rpc: adjust distribution cache validation order
(cherry picked from commit e075ed6baaccac7a8b170a97a48375647600bd5e)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea c017fff2ec wallet2: validate block hash when repairing empty hashchain
(cherry picked from commit ef7bdda92af255270a61e4ea4c6c7fe098a70dd0)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea 7e797d062a epee: remove obsolete MyMonero conversion
Also initialize the temp var used when loading scalar arrays.

(cherry picked from commit 7ba5e2cca91497155bd0a72a5e00059a27fa7e38)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea f7510618e8 wallet2: preserve required SSL when allowing chained certificates
(cherry picked from commit 57a37a156ce1f32b8b3471dc4aad7973130c38da)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea 65fa6f0648 wallet_api: clear stale daemon login
(cherry picked from commit 274c2bda81563f3bc318f51bfccaf0f32ad3b8c0)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea d46a6cd8c7 common: sanitize message writer console output
(cherry picked from commit 52b33f4fb01bd54d936a016cbc63a4850daa3441)
2026-10-04 18:50:24 -04:00
selstaandsuch-gitea 444eb4dd79 lmdb: make transaction admission reentrant
(cherry picked from commit 6ee665b2c228dde4bb576f0ed7edb8d1a1702673)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea cb4f6abd06 wallet_api: preserve output metadata in view-only wallet exports
(cherry picked from commit c5160732570cb4e07be29de1905324389df79978)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea f14082fdbd rpc: reject deep block submissions on restricted RPC
(cherry picked from commit 837c59bed10d06956ca7375a0e91619c0b77142e)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea 01a7c14a82 epee: prevent log injection from malformed HTTP headers
(cherry picked from commit 281c1d41aae7b579fa1307d82622e18abcd038ff)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea fb0d7b2318 wallet_api: expose signed message verification details
(cherry picked from commit 525a6f0b6e1bf53a048ef5d61823bf0043a2f130)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea 52b4aaef3b lmdb: retain percentage fallback for batch resizing
(cherry picked from commit c8d926c6995448a2a8efe6faf5f906eecdacab11)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea 9f5c144a44 lmdb: refine batch size estimation
(cherry picked from commit a34ed83e7290198c5e54e71d6592aef55fa47eae)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea 16f7dfef75 epee: prevent JSON parser log injection
(cherry picked from commit 1b82d32a2f18efde834531a1be28b0f711a495e6)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea 552aea4a7d wallet2: fix task lifetime during parsed block processing
(cherry picked from commit a09eb5cf4aefa6c351acf898ad4e3be4a67ad860)
2026-10-04 18:50:23 -04:00
selstaandsuch-gitea 81d781a965 wallet2: validate key image domain in reserve proofs
Reported by zkao, a tool by zkSecurity

(cherry picked from commit 1bb17925fdff1494ec8f7a127c9c6cd814c36e69)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea 281652a673 p2p: use connection state to detect duplicate handshakes
(cherry picked from commit 57068111aa0dd1e6816d598d1fedb21e2f8cf6c6)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea 4dd27f20a3 rpc: redact txpool age in restricted mode
(cherry picked from commit b4c8385fd382f14419e54c6f1c3800a1642360fd)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea baed767de1 txpool: fix time_in_pool age calculation
(cherry picked from commit 18269ab571f1664eaa05640ae6eaae191de4e03d)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea 741d3ec47b protocol: flush rejected block spans from disconnected peers
(cherry picked from commit dfa2d3020be5cc6dcd4a525bc1b7a315b9e83f57)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea a04ff495f7 wallet_api: reject transaction file signing with hardware wallets
Reported by zkao, a tool by zkSecurity

(cherry picked from commit 735e535adf2c3d7d4c159478747c144e2aea6a69)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea 809a263e11 rpc: hide sensitive txs from restricted block templates
(cherry picked from commit 1d45021cd0e452b60846b458701e612ab01db5c7)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea f26ac02df9 p2p, rpc: group public IPv6 connection limits by /64
(cherry picked from commit f277d328cf1f7e64423b5eb7dc0e21649f71e47a)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea 51012bfc4d device_trezor: validate bridge response size before parsing
(cherry picked from commit 635a558a3f27f0c4098936da033fa687d5220cfe)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea af216147b0 p2p: stop buffered dispatch after fatal notifications
(cherry picked from commit f397f3920998aa8f57f86c9539fd720d288c7e18)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea 333e916fbc rpc: disable get_transaction_pool in restricted mode
(cherry picked from commit af88effd9a82ca715c12ce6ea021fdbc1cbb3102)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea 2ea94e6a21 rpc: hide ZMQ request contents in restricted mode
(cherry picked from commit dfb85dde03650430fa77541af17831f4bb9c5a2c)
2026-10-04 18:50:22 -04:00
selstaandsuch-gitea 1ead51defe rpc: recover from oversized ZMQ requests
(cherry picked from commit d1508916b44d08fa18dc8ac74e04e9f92dbfb2c1)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 131a340a51 wallet2: bounds check additional derivations in is_out_to_acc
(cherry picked from commit 987a2a77d3e4b4d3781e70bc70031ff254313557)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 74d32f0a0f simplewallet: validate get_outs response size
(cherry picked from commit f9f6471b1ed431d638e40c60601bc61aa16f1092)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 0abf7825ea blockchain_prune: use per-table LMDB stats for resize estimation
Use mdb_stat on the active table instead of environment-wide
statistics when estimating copy size. This prevents resizing
decisions from being based on the wrong database.

(cherry picked from commit 8301f936f7e9ce33aeadeee46a6b1de1212f3fdc)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 2084879447 wallet2: validate cached transfer indices
Reported by hacksandhops

(cherry picked from commit 72d91039eb5c67c7912ef8328299e8e28d9effb0)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 255134738b crypto: fix ARMv8 slow-hash inline assembly constraints
(cherry picked from commit 246d76f4fc0aefd3ca570fb00f003d58719c5aa6)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea cc52a213c5 serialization: validate RingCT prunable JSON type
(cherry picked from commit fe2e0dbc59626b737301e843ca31840adf87e9d4)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea ae82190d7b cmake: apply cxa throw wrap flags when linking common
(cherry picked from commit b81fbb393e64e29e04f4f11e9d307442e1241027)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 7d1d93d168 epee: avoid bad_weak_ptr during connection teardown
foreach_connection() can race with connection destruction while the
protocol handler remains in the raw-pointer map. Use the non-throwing
weak_from_this().lock() in add_ref() and treat expired connections as
unavailable.

This is an interim mitigation pending the broader connection lifetime
fix in PR 7345.

(cherry picked from commit 146f801063b85e23b635c235100cc241e4ab626a)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 62439cd8d2 cmake: use wrapped __cxa_throw on GNU/Linux
(cherry picked from commit 9783be5e217ccc00b990095e606eca74f9bf2b51)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 54eb5eb431 wallet2: guard gamma picker against zero-output windows
(cherry picked from commit 7507aed69f4753767711d52747a02e6860b01297)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea f289933e67 blockchain: improve incoming block scan table handling
(cherry picked from commit 05426c36cf6f77a7b0f9bcb0f46a0fd5219f6fa4)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea 5bb99b960b wallet2: avoid linear scans in pool state updates
(cherry picked from commit 839dba22c3a39eec92d2c6be7972df6dc6d57bab)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea ed8fc0a8fd p2p: restore safe sync mode when target height drops
(cherry picked from commit 12098ff5d66d86d73360d28c548c350f6e7b64c8)
2026-10-04 18:50:21 -04:00
selstaandsuch-gitea bcdb7c1075 http: share deterministic header field parser
(cherry picked from commit d2e4cbcda578152d9640a1aafa97a527f48a1380)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea e9aa147fb3 wallet2: guard optimized coinbase refresh against empty vout
(cherry picked from commit ef7a86c99f7c58c361c3c0ddf5687a165c22ce7a)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea 06fa8be413 wallet2: reject non-monotonic rct output distributions
(cherry picked from commit b99d15f08d80a8cad6dee88628192ba0411544fb)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea 16045bb71d net: cap aggregate ZMQ receive size
(cherry picked from commit 4f6652f356f804403f46ecbbb8b90c1c03abbc64)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea 77fed902b3 wallet2: store multisig nonce erasure before returning signed txset
(cherry picked from commit d6f0a4d211cc419095e778a39a83d65000e47bf6)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea 08cc86ab88 net: canonicalize Tor/I2P hosts during deserialization
(cherry picked from commit 93d792e63c85baec6f8a3b8f9bbad3f803dd3a7e)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea d171742ed6 p2p: close zone connections before stopping net servers
(cherry picked from commit b7ca9e73f23cfb0ce1e795b2074ad12af56b04e3)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea 1e17dc299a p2p: make stop signal idempotent
(cherry picked from commit ec60113e09d9fc985b1c35fe1c579ef73c067d91)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea f8052081f3 net: canonicalize Tor and I2P hostnames
(cherry picked from commit 7d339778135c44370199f5c84e8c90b3d60f6717)
2026-10-04 18:50:20 -04:00
selstaandsuch-gitea 9ee36bbac3 serialization: handle EOF at varint boundary
(cherry picked from commit 7a7c42ffba1da6bd3f7bfd5a09ef9ae7275537a6)
2026-10-04 18:50:19 -04:00
selstaandsuch-gitea 72da5948b6 wallet2: clear m_additional_tx_keys during bg sync
(cherry picked from commit 4b00f47d43d784447904d777f220a525044a3374)
2026-10-04 18:50:19 -04:00
selstaandsuch-gitea 8967c814b3 wallet_rpc_server: remove unused finalize_multisig endpoint
(cherry picked from commit 6d36b1980d9b827117e293b3ca8a6b509b592b1a)
2026-10-04 18:50:19 -04:00
selstaandsuch-gitea 2b502bb25b rpc: restrict get_alt_blocks_hashes
(cherry picked from commit 7de175802a48caa7b96e516138de6cdc914bdc76)
2026-10-04 18:50:19 -04:00
selstaandsuch-gitea d94591b63e daemonizer: avoid unsafe pidfile truncation
(cherry picked from commit 4167923ee21cba06f311bebab29206b1f894b067)
2026-10-04 18:50:19 -04:00
selstaandsuch-gitea f201dc06dc wallet_rpc_server: preserve payment ID when editing address book
(cherry picked from commit 6db72c40e1764b04ab149114025da5fa7a1da7b6)
2026-10-04 18:50:19 -04:00
selstaandsuch-gitea d7c41d7ace rpc: reject invalid JSON-RPC ids in ZMQ requests
(cherry picked from commit a16f514c67e95cec4946dc83dbad04ed1baad023)
2026-10-04 18:50:19 -04:00
selstaandsuch-gitea f9253a9ec0 wallet_rpc_server: add missing trusted daemon check
(cherry picked from commit 7e70e0fb9359507bc1cd7e75eb73d82a9001d005)
2026-10-04 18:50:19 -04:00
selstaandsuch-gitea 3e3351ad24 zmq: switch to RapidJSON iterative parsing
(cherry picked from commit 9b46f84008ff807211f5ebb5f480e0610c5f54b9)
2026-10-04 18:50:19 -04:00
selstaandjwinterm 2846749f11 daemon: clarify limitations of restricted ZMQ RPC in help text
(cherry picked from commit 0b7c34520c0d218021b7941ebbc2faf0e2b58c2f)
2026-05-06 10:52:37 -04:00
selstaandjwinterm 4db19d46ea zmq: add restricted checks to GetInfo
(cherry picked from commit f31bb18174950237ea6ed083614c37a04d33b46e)
2026-05-06 10:52:37 -04:00
selstaandjwinterm e8c2387c24 wallet2: reject duplicate outputs in reserve proofs
(cherry picked from commit 2827d7fe84ad4102dd9f3284eb98da8f0d66266d)
2026-05-06 10:52:36 -04:00
selstaandjwinterm cc821f5bd8 cryptonote_core: restore separate fakechain data dir for core_tests
(cherry picked from commit 05cc8bc477007af8d392b450e20ae6c4c40a5a43)
2026-05-06 10:52:36 -04:00
selstaandjwinterm 0bf3b9f441 wallet2: ensure daemon returns correct tx for spend proof
(cherry picked from commit 04eeb3ba1fc2ed0239eb10e885136d86b7e98ad0)
2026-05-06 10:52:36 -04:00
selstaandjwinterm 21b51550e5 wallet2: remove deprecated txs_as_hex
also add missing underflow check

(cherry picked from commit 54abe12f94abe5c0ca2e8ae63e3fea2d8cd41c9a)
2026-05-05 18:20:53 -04:00
selstaandjwinterm 07ab9bf66c zmq: add more missing restricted rpc checks
(cherry picked from commit 6e51bdcd8ef233814d81c2b953fa82f13cbbd442)
2026-05-05 18:20:53 -04:00
selstaandjwinterm 93db6154d4 wallet_rpc_server: restrict relay_tx
(cherry picked from commit 3703ec1833c3814290db7615fec2314f57ba5b8b)
2026-05-05 18:20:53 -04:00
selstaandjwinterm ffff77fe50 wallet_rpc_server: fix ssl_allowed_fingerprints hex parsing
(cherry picked from commit b635e675e699f87d0d028f6f3f6e6a2ea2c05104)
2026-05-05 18:20:53 -04:00
selstaandjwinterm af6a55c941 wallet2: add parse multisig tx sanity checks
(cherry picked from commit 2094d38c86bab8ab23bb5ddfb5cd7ce3a7957a63)
2026-05-05 18:20:53 -04:00
selstaandjwinterm ad1fb36b38 zmq: add missing restricted rpc check
(cherry picked from commit e6ce535b24c48104fb1cfebc1ae03686afe820f2)
2026-05-05 18:20:53 -04:00
selstaandjwinterm 33b967d231 wallet2: fix background wallet detection in verify_password()
(cherry picked from commit e7b121ac17d6e0c3bb6f17911ae9ab18132b3c67)
2026-05-05 18:20:52 -04:00
selstaandjwinterm 907d6dd58d zmq: add restricted rpc mode
(cherry picked from commit 7f2cfe9294ec1fa7bece2a8069114c1b6985650f)
2026-05-05 18:20:52 -04:00
selstaandjwinterm a3a824d288 abstract_tcp_server2: add missing return
(cherry picked from commit f60b400917a6d2fecc6c03524c70fbd9e033f436)
2026-05-05 18:19:54 -04:00
selstaandjwinterm 4636e3416f windows_service: quote service executable path
(cherry picked from commit 53121587562af1abef3680060c240068a1ff2c97)
2026-05-05 18:19:53 -04:00
selstaandjwinterm 8ac909841b p2p: fix inverted ternary in peer list filter
(cherry picked from commit 54edc176d59133a1e279c4066b16983a41aba56c)
2026-05-05 18:19:53 -04:00
selsta 7e3edc29c6 epee: only parse valid port
Reported by hacksandhops and Ada Logic.
2025-08-31 00:13:55 +02:00
selsta f921431f34 checkpoints: update to a recent block height 2025-08-20 18:42:13 +02:00
selsta 32f701b0cd build: prepare v0.18.4.2 2025-08-01 17:25:46 +02:00
selsta b96af8e17a build: prepare v0.18.4.1 2025-07-09 16:12:16 +02:00
selsta 97e1a49dd7 checkpoints: update to a recent block height 2025-03-25 21:22:47 +01:00
selsta 3fef296082 build: prepare v0.18.4.0 2025-02-13 18:32:51 +01:00
selsta 4d2aad8378 Revert "blockchain: detect and log bad difficulty calculations"
This reverts commit 5741b4d74d.
2025-01-14 13:04:49 +01:00
selsta 956d55c35f build: prepare v0.18.3.4 2024-07-22 14:23:40 +02:00
selsta 1123ae9043 net_node: update seed nodes
Also remove port for I2P seed nodes
2024-05-12 15:24:41 +02:00
selsta 4634b8b539 wallet2: fix stagenet get_approximate_blockchain_height 2024-04-28 21:16:14 +02:00
selsta 97e3ce5f18 build: prepare v0.18.3.3 2024-03-11 15:20:10 +01:00
selsta 1a931ecc83 depends: add riscv64 linux build tag 2024-03-09 21:16:16 +01:00
selsta 32b3a56313 wallet2: adjust fee during backlog, fix set priority 2024-03-08 14:12:17 +01:00
selsta c97c2ec01c docs: omit i2p port number from ANONYMITY_NETWORKS 2024-02-21 01:03:11 +01:00