Test malleability attacks #3925
Conversation
grarco
force-pushed
the
grarco/test-malleability-attacks
branch
from
d4e741b
to
39972d5
Compare
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #3925 +/- ##
==========================================
+ Coverage 73.21% 73.36% +0.15%
==========================================
Files 341 341
Lines 105280 105344 +64
==========================================
+ Hits 77081 77289 +208
+ Misses 28199 28055 -144 ☔ View full report in Codecov by Sentry. |
| response.result.info, | ||
| expected_error | ||
| ); | ||
| let mut runner = TestRunner::new(Config::default()); |
There was a problem hiding this comment.
I'm doing this to avoid rerunning the setup for every iteration but I'm not completely familiar with the implications of instantiating a test runner over just calling protest!, in case I can switch to the latter
There was a problem hiding this comment.
why aren't you using the macros? I was a bit confused about the origin of TestRunner, I had never seen it being used manually
| response.result.info, | ||
| expected_error | ||
| ); | ||
| let mut runner = TestRunner::new(Config::default()); |
There was a problem hiding this comment.
why aren't you using the macros? I was a bit confused about the origin of TestRunner, I had never seen it being used manually
| prop_compose! { | ||
| /// Generate an arbitrary signed inner tx that has been tampered with. | ||
| pub fn arb_tampered_inner_tx(signer: common::SecretKey) | ||
| (tx1 in arb_valid_signed_inner_tx(signer.clone()))( | ||
| tx2 in arb_valid_signed_inner_tx(signer.clone()), | ||
| mut tx in Just(tx1), | ||
| ) -> Tx { | ||
| // TODO: tamper with the sections too once signature is updated | ||
| // Tamper with the header only for now | ||
| tx.header = tx2.header; | ||
| tx | ||
| } | ||
| } |
There was a problem hiding this comment.
I think it would be interesting if we tampered with a tx section, particularly one that had meaningful tx data, such as a bond tx. the raw header hash would have changed, while the authorization stored in a section would have been for the previous hash
Describe your changes
test_wrapper_unknown_addressChecklist before merging
breaking::labelsnamada-docsreponamada-indexerornamada-masp-indexer, a corresponding PR is opened in that repo