Commit Graph

1627 Commits

Author SHA1 Message Date
Kris Nuttycombe 58e8d8620c revert broken "safe extract" functionality in golden tests. 2023-03-28 12:27:59 -06:00
Daira Emma Hopwood 507e23eec4 Repair show_help RPC test.
This was broken by a combination of several PRs that were apparently
merged with tests not passing (at least #6425 and #6479), due to a CI
fault.

Signed-off-by: Daira Emma Hopwood <daira@jacaranda.org>
2023-03-27 13:09:35 +01:00
Greg Pfeil 666a8d1b37
Merge pull request #6377 from sellout/wallet_tx_builder/z_sendmany
Extract common transaction logic from z_sendmany
2023-03-22 11:24:33 -06:00
Greg Pfeil af2c7e7e49
Address WalletTxBuilder review feedback 2023-03-20 14:23:18 -06:00
Greg Pfeil 1f72b42b81
Additional z_sendmany test cases
Also improve error messages.
2023-03-20 11:24:50 -06:00
Jack Grigg 0b77f8f79a cargo update 2023-03-17 23:22:53 +00:00
Greg Pfeil 5081a8e8fd
Address WalletTxBuilder PR feedback 2023-03-17 16:11:40 -06:00
Jack Grigg fe0b3ee89f depends: Postpone CCache updates again
We can update CCache when we drop support for Ubuntu 18.04.
2023-03-17 20:42:13 +00:00
Jack Grigg 69ab270480 depends: `cxx 1.0.92` 2023-03-17 20:32:01 +00:00
Jack Grigg 7f35a0da5c Migrate to `zcash_primitives 0.10`
Closes zcash/zcash#6398.
2023-03-17 00:09:45 +00:00
Greg Pfeil 9f84ce2858
Update WalletTxBuilder based on review
Some of the more significant changes are
- remove release note entry for already-released feature;
- rephrase some error messages and comments;
- add a missing case to `EstimateTxSize`;
- don’t return a selector when we don’t have a UFVK for a UA, which allows some
  simplifications (and elimination of a failure case) to happen; and
- remove a redundant `InsufficientFundsError`.
2023-03-16 13:57:57 -06:00
Jack Grigg 41bd54c8ae cargo vet prune 2023-03-16 15:45:04 +00:00
Jack Grigg d54f7d001e CI: Migrate to `cargo-vet 0.5` 2023-03-16 15:44:31 +00:00
Kris Nuttycombe ec88817b72 zcashd release 5.4.2
Notable changes
 ===============
 
 This hotfix remediates memory exhaustion vulnerabilities that zcashd inherited
 as a fork of bitcoind. These bugs could allow an attacker to use peer-to-peer
 messages to fill the memory of a node, resulting in a crash.
 -----BEGIN PGP SIGNATURE-----
 
 iQGzBAABCgAdFiEEX8Nd8pnYcf0pobEL9FXpuSAjoYsFAmP1DKQACgkQ9FXpuSAj
 oYt2jQv+IurleLqEbtBW2ajDYDIkcMu+asEtHCk3B6GELykKaFMgHYTffFBmuyJ+
 5GdoX685Rn6r8BxK6K1u129A9ztY7K0JpVeDA75tN5WLBj9twLdNaODfCLg5EjlZ
 UtxTNnynQ0MX5Uv7pt1DAM+++OKYujUHypaajgZ9ttqpSHZl3Z2ye0/HFEc4023p
 VH13CvU/3R4JLkFENi49rbS49LFfVuQrhAQoOPlCf3xoWbUYIdmWWZa/HOJV3g0e
 3mqC+rhz97GVylLI4LJrm3v0tLeEUIuu+fdAziWfuWrBlB4jQ5p4L5trDHiQoqWB
 5Qt5tjJKHHLnHHSyLcFFaes12tjPfrn9PBxYDPyfFAHIGf0WEiy36+6G5P7jpjYj
 OXLAmBPBIRBgZf9LJIHrgvqQynfGe9vaWgCArWWgSC8wZ2hWlM7pZRhCe+uw35R1
 e5AfZjvbXj6gR+1631Mhl84e6xkGXe24szzuZDrUCqLBJpTb1JNLRh1OtT8zDN0t
 MfKtnE3W
 =AXAQ
 -----END PGP SIGNATURE-----

Merge tag 'v5.4.2' into hotfix-v5.4.2

zcashd release 5.4.2

Notable changes
===============

This hotfix remediates memory exhaustion vulnerabilities that zcashd inherited
as a fork of bitcoind. These bugs could allow an attacker to use peer-to-peer
messages to fill the memory of a node, resulting in a crash.
2023-03-13 06:19:46 -06:00
Jack Grigg a62fcddba2 qa: Import Rust crate audits from ChromeOS 2023-03-10 00:30:13 +00:00
Jack Grigg bf37cd6317 qa: Replace Firefox audits with aggregated Mozilla audits in registry 2023-03-10 00:29:44 +00:00
Greg Pfeil 37ca96e747
Address comments on WalletTxBuilder introduction 2023-03-09 16:29:15 -07:00
Greg Pfeil 820af47019
Unify requireTransparentCoinbase handling
Eliminates SelectsTransparentCoinbase in favor of a Disallow/Allow/Require ternary. Also asserts if
a selector requires transparent coinbase but doesn’t select transparent.
2023-03-09 13:04:17 -07:00
Greg Pfeil d2d0378943
Apply suggestions from code review
Co-authored-by: Kris Nuttycombe <kris@nutty.land>
Co-authored-by: str4d <thestr4d@gmail.com>
2023-03-09 13:04:17 -07:00
Greg Pfeil a520c1d4a6
Test updates for z_sendmany WalletTxBuilder changes 2023-03-09 13:04:17 -07:00
Greg Pfeil c1dbe12d77
Update tests for async z_sendmany
Need to check the opid status now instead of catching an exception.
2023-03-09 13:04:17 -07:00
Kris Nuttycombe 9b17b45da5 Apply suggestions from code review
Co-authored-by: str4d <thestr4d@gmail.com>
2023-03-09 10:39:13 -07:00
Kris Nuttycombe 0d8118b1ed Add information about deprecated features to `deprecationinfo` results.
Fixes #6422
2023-03-09 10:33:29 -07:00
Kris Nuttycombe 71e80c8656 Postpone dependency updates for v5.4.2 hotfix. 2023-02-20 19:54:51 -07:00
Jack Grigg 4ad081714f qa: Postpone LevelDB 1.23 2023-02-17 04:37:37 +00:00
Jack Grigg 245f9666ff `cargo update` 2023-02-17 04:36:20 +00:00
Jack Grigg fe05310e37 qa: Import Rust crate audits from ISRG 2023-02-16 21:28:52 +00:00
Jack Grigg 5cc37d59a4 `cargo vet regenerate imports` 2023-02-16 21:27:57 +00:00
Jack Grigg e738af6a27 depends: `native_zstd 1.5.4` 2023-02-16 21:25:02 +00:00
Jack Grigg e775c13c4f depends: `cxx 1.0.91`
This also partially reverts zcash/zcash@d3b434eb0f
so we now check in a lockfile for `cxxbridge`.
2023-02-16 21:25:02 +00:00
Jack Grigg 942189fc20 qa: Handle commit IDs correctly to `updatecheck.py` 2023-02-16 19:11:34 +00:00
Jack Grigg ed9b9f8a18 qa: Fix `google/leveldb` tag parsing in `updatecheck.py`
The `v` prefix has been dropped from tags starting with 1.21.
2023-02-16 18:41:41 +00:00
Jack Grigg a0b4b2c25f qa: Fix year in postponement lines 2023-02-16 18:39:30 +00:00
Jack Grigg 06e4ef83ec depends: Update Clang / libcxx to LLVM 15.0.6
- We update Windows cross-compile builds to 15.0.7 because binaries are
  provided for it, but not currently for any other platform we need.
- We update native x84_64 macOS builds to 15.0.4 because no 15.0.6
  binaries are provided, and the 15.0.7 ones appear to be targeted at a
  newer Darwin version.
- We keep FreeBSD on 14.0.6 because no Clang 15 binaries are provided,
  and as FreeBSD is a Tier 3 platform it doesn't block us from upgrading
  the remaining platforms.
2023-02-16 16:02:37 +00:00
str4d efa2dc70e8
Merge pull request #6417 from sellout/rpc-tests-interrupt-context
Show in-progress tests when rpc-tests is interrupted
2023-02-14 15:14:44 +00:00
Kris Nuttycombe 0b9f76c36c
Merge pull request #6430 from zcash/hotfix-v5.4.1
Back-merge of hotfix-v5.4.1
2023-02-13 16:24:30 -07:00
Jack Grigg 7628ec7dfa Postpone dependency updates for v5.4.1 2023-02-13 18:05:35 +00:00
Jack Grigg 1ceb4c19cc qa: Extend `wallet_deprecation` to test `allowdeprecated` in config file
Co-authored-by: Daira Hopwood <daira@jacaranda.org>
2023-02-10 23:57:05 +00:00
Jack Grigg 8dd3e6135d qa: Refactor `wallet_deprecation` test to extract common logic
Co-authored-by: Daira Hopwood <daira@jacaranda.org>
2023-02-10 23:57:05 +00:00
Greg Pfeil 3178296c38
Make extra newline more explicit
Co-authored-by: Kris Nuttycombe <kris@nutty.land>
2023-02-09 13:51:46 -07:00
Greg Pfeil cbc0511cd2
Show in-progress tests when rpc-tests is interrupted
Interrupting rpc-tests (e.g., with Ctrl-c) will print a list of the tests that were running when the
interrupt was received. This is useful for identifying tests that aren’t terminating.

For example:
```
wallet_broadcast.py:
Pass: True, Duration: 62 s

.................
zmq_test.py:
Pass: True, Duration: 29 s

.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................^C
The following tests were running when interrupted:
• mempool_reorg.py

Traceback (most recent call last):
...
```
2023-02-09 09:53:24 -07:00
Charlie O'Keefe 251432966f
Merge pull request #6401 from nuttycom/version-5.4.0-back_merge
Back-merge version-5.4.0 changes to `master`.
2023-02-02 15:36:12 -07:00
Kris Nuttycombe 5fb4385c5a Postpone rustcxx and native_cxxbridge versions 1.0.89 2023-02-01 17:28:38 -07:00
Kris Nuttycombe 141d7c29d3
Merge pull request #6236 from zcash/fix_tar_extractall
Adding tarfile member sanitization to extractall()
2023-02-01 16:33:34 -07:00
Jack Grigg 51d62c652d qa: Add RPC test reproducing the Orchard reindex issue
Co-authored-by: Daira Hopwood <daira@jacaranda.org>
Co-authored-by: Kris Nuttycombe <kris@nutty.land>
2023-01-31 00:28:30 +00:00
Daira Hopwood 2afaa88c01 Postpone updates for 5.4.0.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2023-01-27 21:55:38 +00:00
Kris Nuttycombe 95e3447b96 Fix potential path or symlink traversal
Use `realpath` instead of `abspath` and remove unused `safe_extract` arguments & defaults.

Reviewed with @daira @str4d @sellout
2023-01-27 14:08:02 -07:00
TrellixVulnTeam 543df3797a Adding tarfile member sanitization to extractall() 2023-01-27 14:08:01 -07:00
Kris Nuttycombe 069159b8c1 Merge commit '267ddf8efe36cc799c4c31772a8883ea332ef55b' into version-5.4.0 2023-01-26 09:30:33 -07:00
Kris Nuttycombe 214c3007f5 Enable tests of chain supply & transparent pool balance. 2023-01-24 02:13:05 +00:00