From 25d2197043bf1d7f499b7d0d20a0e4f49ffd5808 Mon Sep 17 00:00:00 2001 From: Sean Bowe Date: Thu, 21 Jul 2016 18:34:59 -0600 Subject: [PATCH] Remove more from libsnark, and fix potential remote-DoS. --- depends/packages/libsnark.mk | 4 ++-- src/zcash/JoinSplit.cpp | 6 +++++- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/depends/packages/libsnark.mk b/depends/packages/libsnark.mk index f2c4b33d..15912f18 100644 --- a/depends/packages/libsnark.mk +++ b/depends/packages/libsnark.mk @@ -3,8 +3,8 @@ $(package)_version=0.1 $(package)_download_path=https://github.com/zcash/$(package)/archive/ $(package)_file_name=$(package)-$($(package)_git_commit).tar.gz $(package)_download_file=$($(package)_git_commit).tar.gz -$(package)_sha256_hash=43b0c921e8a1d556e70cf5c63c921db54f151842eb3cada029e3b92095e7b6f9 -$(package)_git_commit=a7031481fd8d2360337321401fe8e24f0359317a +$(package)_sha256_hash=369fe9f5a8018eb46cce3cf50bfbf21419d8e963b25067ffd00cb9ac5c39f649 +$(package)_git_commit=11242d8afe304c8bcc252baec483f04a110d1dd4 $(package)_dependencies=libgmp libsodium diff --git a/src/zcash/JoinSplit.cpp b/src/zcash/JoinSplit.cpp index 2b1d48d6..0d9e789d 100644 --- a/src/zcash/JoinSplit.cpp +++ b/src/zcash/JoinSplit.cpp @@ -157,7 +157,11 @@ public: vpub_new ); - return r1cs_ppzksnark_verifier_strong_IC(*vk, witness, r1cs_proof); + try { + return r1cs_ppzksnark_verifier_strong_IC(*vk, witness, r1cs_proof); + } catch (...) { + return false; + } } boost::array prove(