zcash-hackworks
/
zcash-patched-for-explorer
mirror of https://github.com/zcash-hackworks/zcash-patched-for-explorer.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Auto merge of #2293 - daira:alerts-for-2017-04-11.a, r=nathan-at-least 

Alerts for 2017-04-11.a security issue (fixed in 1.0.8-1)

Alert 1002 (versions 1.0.0-1.0.2 inclusive).
Alert 1003 (versions 1.0.3-1.0.8 inclusive).

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
Homu 2017-05-15 16:08:29 -07:00
parent 2adeb3948b 8d8318c947
commit 38684e4c42
1 changed files with 18 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
src/sendalert.cpp
View File

@ -71,9 +71,9 @@ void ThreadSendAlert()
//
CAlert alert;
alert.nRelayUntil = GetTime() + 15 * 60;
alert.nExpiration = GetTime() + 90 * 24 * 60 * 60;
alert.nID = 1001; // use https://github.com/zcash/zcash/wiki/specification#assigned-numbers to keep track of alert IDs
alert.nCancel = 0; // cancels previous messages up to this ID number
alert.nExpiration = GetTime() + 6 * 30 * 24 * 60 * 60;
alert.nID = 1003; // use https://github.com/zcash/zcash/wiki/specification#assigned-numbers to keep track of alert IDs
alert.nCancel = 1001; // cancels previous messages up to this ID number
// These versions are protocol versions
// 170002 : 1.0.0
@ -81,19 +81,29 @@ void ThreadSendAlert()
alert.nMaxVer = 170002;
//
// main.cpp:
// main.cpp:
// 1000 for Misc warnings like out of disk space and clock is wrong
// 2000 for longer invalid proof-of-work chain
// 2000 for longer invalid proof-of-work chain
// Higher numbers mean higher priority
// 4000 or higher will put the RPC into safe mode
alert.nPriority = 1500;
alert.strComment = "";
alert.strStatusBar = "Your client is out of date and potentially vulnerable to denial of service. Please update to the most recent version of Zcash (1.0.5). More info at: https://z.cash/support/security.html";
alert.strRPCError = "Your client is out of date and potentially vulnerable to denial of service. Please update to the most recent version of Zcash (1.0.5). More info at: https://z.cash/support/security.html";
alert.strStatusBar = "Your client is out of date and vulnerable to denial of service. Please update to the most recent version of Zcash (1.0.8-1 or later). More info at: https://z.cash/support/security/";
alert.strRPCError = alert.strStatusBar;
// Set specific client version/versions here. If setSubVer is empty, no filtering on subver is done:
// alert.setSubVer.insert(std::string("/MagicBean:0.7.2/"));
alert.setSubVer.insert(std::string("/MagicBean:1.0.3/"));
const std::vector<std::string> useragents = {"MagicBean", "BeanStalk", "AppleSeed", "EleosZcash"};
BOOST_FOREACH(const std::string& useragent, useragents) {
alert.setSubVer.insert(std::string("/"+useragent+":1.0.3/"));
alert.setSubVer.insert(std::string("/"+useragent+":1.0.4/"));
alert.setSubVer.insert(std::string("/"+useragent+":1.0.5/"));
alert.setSubVer.insert(std::string("/"+useragent+":1.0.6/"));
alert.setSubVer.insert(std::string("/"+useragent+":1.0.7/"));
alert.setSubVer.insert(std::string("/"+useragent+":1.0.7-1/"));
alert.setSubVer.insert(std::string("/"+useragent+":1.0.8/"));
}
// Sanity check
assert(alert.strComment.length() <= 65536); // max length in alert.h