diff --git a/CHANGELOG.md b/CHANGELOG.md index 4c583cb7b..21b761dcc 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -243,7 +243,8 @@ Ref: https://keepachangelog.com/en/1.0.0/ * (x/authz) [\#11252](https://github.com/cosmos/cosmos-sdk/pull/11252) Allow insufficient funds error for authz simulation * (cli) [\#11313](https://github.com/cosmos/cosmos-sdk/pull/11313) Fixes `--gas auto` when executing CLI transactions in `--generate-only` mode * (cli) [\#11337](https://github.com/cosmos/cosmos-sdk/pull/11337) Fixes `show-adress` cli cmd -* (crypto) [\#11298](https://github.com/cosmos/cosmos-sdk/pull/11298) Fix cgo secp signature verification and update libscep256k1 library. +* (crypto) [\#11298](https://github.com/cosmos/cosmos-sdk/pull/11298) Fix cgo secp signature verification and update libscep256k1 library. +* (x/authz) [\#11512](https://github.com/cosmos/cosmos-sdk/pull/11512) Fix response of a panic to error, when subtracting balances. ### State Machine Breaking diff --git a/x/staking/types/authz.go b/x/staking/types/authz.go index 45ce23089..e26712ade 100644 --- a/x/staking/types/authz.go +++ b/x/staking/types/authz.go @@ -103,6 +103,11 @@ func (a StakeAuthorization) Accept(ctx sdk.Context, msg sdk.Msg) (authz.AcceptRe Updated: &StakeAuthorization{Validators: a.GetValidators(), AuthorizationType: a.GetAuthorizationType()}}, nil } + // check sufficient balance exists. + if _, isNegative := sdk.NewCoins(*a.MaxTokens).SafeSub(sdk.NewCoins(amount)); isNegative { + return authz.AcceptResponse{}, sdkerrors.ErrInsufficientFunds.Wrapf("amount is more than max tokens") + } + limitLeft := a.MaxTokens.Sub(amount) if limitLeft.IsZero() { return authz.AcceptResponse{Accept: true, Delete: true}, nil diff --git a/x/staking/types/authz_test.go b/x/staking/types/authz_test.go index fd7f17d63..1f649f0a2 100644 --- a/x/staking/types/authz_test.go +++ b/x/staking/types/authz_test.go @@ -13,6 +13,7 @@ import ( var ( coin100 = sdk.NewInt64Coin("steak", 100) + coin150 = sdk.NewInt64Coin("steak", 150) coin50 = sdk.NewInt64Coin("steak", 50) delAddr = sdk.AccAddress("_____delegator _____") val1 = sdk.ValAddress("_____validator1_____") @@ -70,6 +71,17 @@ func TestAuthzAuthorizations(t *testing.T) { true, nil, }, + { + "delegate: coins more than allowed", + []sdk.ValAddress{val1, val2}, + []sdk.ValAddress{}, + stakingtypes.AuthorizationType_AUTHORIZATION_TYPE_DELEGATE, + &coin100, + stakingtypes.NewMsgDelegate(delAddr, val1, coin150), + true, + false, + nil, + }, { "delegate: verify remaining coins", []sdk.ValAddress{val1, val2},