Auto merge of #2293 - daira:alerts-for-2017-04-11.a, r=nathan-at-least
Alerts for 2017-04-11.a security issue (fixed in 1.0.8-1) Alert 1002 (versions 1.0.0-1.0.2 inclusive). Alert 1003 (versions 1.0.3-1.0.8 inclusive). Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
commit
38684e4c42
|
@ -71,9 +71,9 @@ void ThreadSendAlert()
|
|||
//
|
||||
CAlert alert;
|
||||
alert.nRelayUntil = GetTime() + 15 * 60;
|
||||
alert.nExpiration = GetTime() + 90 * 24 * 60 * 60;
|
||||
alert.nID = 1001; // use https://github.com/zcash/zcash/wiki/specification#assigned-numbers to keep track of alert IDs
|
||||
alert.nCancel = 0; // cancels previous messages up to this ID number
|
||||
alert.nExpiration = GetTime() + 6 * 30 * 24 * 60 * 60;
|
||||
alert.nID = 1003; // use https://github.com/zcash/zcash/wiki/specification#assigned-numbers to keep track of alert IDs
|
||||
alert.nCancel = 1001; // cancels previous messages up to this ID number
|
||||
|
||||
// These versions are protocol versions
|
||||
// 170002 : 1.0.0
|
||||
|
@ -81,19 +81,29 @@ void ThreadSendAlert()
|
|||
alert.nMaxVer = 170002;
|
||||
|
||||
//
|
||||
// main.cpp:
|
||||
// main.cpp:
|
||||
// 1000 for Misc warnings like out of disk space and clock is wrong
|
||||
// 2000 for longer invalid proof-of-work chain
|
||||
// 2000 for longer invalid proof-of-work chain
|
||||
// Higher numbers mean higher priority
|
||||
// 4000 or higher will put the RPC into safe mode
|
||||
alert.nPriority = 1500;
|
||||
alert.strComment = "";
|
||||
alert.strStatusBar = "Your client is out of date and potentially vulnerable to denial of service. Please update to the most recent version of Zcash (1.0.5). More info at: https://z.cash/support/security.html";
|
||||
alert.strRPCError = "Your client is out of date and potentially vulnerable to denial of service. Please update to the most recent version of Zcash (1.0.5). More info at: https://z.cash/support/security.html";
|
||||
alert.strStatusBar = "Your client is out of date and vulnerable to denial of service. Please update to the most recent version of Zcash (1.0.8-1 or later). More info at: https://z.cash/support/security/";
|
||||
alert.strRPCError = alert.strStatusBar;
|
||||
|
||||
// Set specific client version/versions here. If setSubVer is empty, no filtering on subver is done:
|
||||
// alert.setSubVer.insert(std::string("/MagicBean:0.7.2/"));
|
||||
alert.setSubVer.insert(std::string("/MagicBean:1.0.3/"));
|
||||
const std::vector<std::string> useragents = {"MagicBean", "BeanStalk", "AppleSeed", "EleosZcash"};
|
||||
|
||||
BOOST_FOREACH(const std::string& useragent, useragents) {
|
||||
alert.setSubVer.insert(std::string("/"+useragent+":1.0.3/"));
|
||||
alert.setSubVer.insert(std::string("/"+useragent+":1.0.4/"));
|
||||
alert.setSubVer.insert(std::string("/"+useragent+":1.0.5/"));
|
||||
alert.setSubVer.insert(std::string("/"+useragent+":1.0.6/"));
|
||||
alert.setSubVer.insert(std::string("/"+useragent+":1.0.7/"));
|
||||
alert.setSubVer.insert(std::string("/"+useragent+":1.0.7-1/"));
|
||||
alert.setSubVer.insert(std::string("/"+useragent+":1.0.8/"));
|
||||
}
|
||||
|
||||
// Sanity check
|
||||
assert(alert.strComment.length() <= 65536); // max length in alert.h
|
||||
|
|
Loading…
Reference in New Issue