hyperledger-labs / fabric-token-sdk

83%

LAST BUILD ON BRANCH security/tokens-validation

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• 1160-use-db-notifiers
• 1205-double-check-marshaltomessagetosign-and-the-way-the-message-is-formed
• 1232_sec_verify_identity
• 1331-unit-tests-tokencorezkatdlognoghv1transfer
• 1332-unit-test-tokencorezkatdlognoghv1token
• 1335-unit-test-tokencorezkatdlognoghv1issue
• 1338-unit-test-tokencorezkatdlognoghv1validator
• 1354-unit-test-tokencorezkatdlognoghv1crypto
• 1357-unit-test-tokencorecommon
• 1363-fix-flaky-fail-testsufficienttokensbigdenominationsonereplica-859s
• 1367-unit-test-tokencorezkatdlognoghv1audit
• 1369-unit-test-tokencorefabtokenv1
• 1372-unit-test-tokencore
• 1383-unit-test-cmdtokengen
• 1386-network-service-fabricx-query-service-based-key-lookup
• 1388-issuemetadatamatch-does-not-check-issuer-identity
• 1391-unit-tests-tokencorezkatdlognoghv1driver
• 1415-featidentity_service-check-identity-db-if-a-lookup-fails
• 1444-taskidentity_service-add-optimized-idemix-owner-representation
• 1445-split-artifactgen
• 1462-network-service-acl-support-during-endorsement
• 1606-ttx-recipients-flow-doc
• 1609-context-aware-mutex
• 1639_avoid_deadload_livelock
• 918-ttx-recipients-audit
• Soumya8898/extend-issuer-wallet
• ai-findings-autofix/token-services-ttx-collectendorsements.go
• auditor-service-coverage
• bench-fcs-zkp
• ci/add-bench-check
• config/minimal-startup
• config/rework-defaults
• cov-driver
• cov-sdk
• cov-services-nfttx
• cov-services-ttx
• cov-services-utils
• cov-token
• cov_certifier
• cov_identity_deserializer
• cov_identity_multisig
• cov_identity_x509
• cov_services_identity
• csp-rp
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.4
• dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.40.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.43.0
• dependabot/go_modules/google.golang.org/grpc-1.79.3
• dependabot/go_modules/token/services/storage/db/kvs/hashicorp/github.com/go-jose/go-jose/v4-4.1.4
• dependabot/go_modules/token/services/storage/db/kvs/hashicorp/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp-1.43.0
• dependabot/go_modules/token/services/storage/db/kvs/hashicorp/go.opentelemetry.io/otel/sdk-1.43.0
• dependabot/go_modules/token/services/storage/db/kvs/hashicorp/google.golang.org/grpc-1.79.3
• dlognogh_docs
• docs-network-service
• docs/clarify-auditor-signatures
• docs/identity-service-improvements
• f-agents
• f-ci-docker-fix
• f-config-cleanup
• f-coverage-badge
• f-coveralls-integration
• f-deps-update
• f-documentation
• f-fsc-ns-integration
• f-fsc-update
• f-fsc-v0-10-1
• f-fsc1232-update
• f-github-stats
• f-github-stats-tools
• f-golangcilint-v2.11.4
• f-maintainers
• f-openssf
• f-postgres-notifier-bugfix
• f-readme-badges
• f-redeem-issuer-check
• f-ttx-finality-improvements
• f-ttx-ut
• f-unit-test-flaky-fix
• feat/auditor-metrics
• feat/cache-verifier-deserialization
• feat/certifier-client-hardening
• feat/finality-listener-metrics
• feat/finality-queue-metrics
• feat/finality-queue-processing-duration-metric
• feat/policy-based-identity-v2
• feat/quantity-benchmarks
• feat/quantity-clone-method
• feat/quantity-error-handling-immutability
• feat/selector-lifecycle-shutdown
• feat/sherdlock-selector-metrics
• feat/token-cache-notifier-subscription
• feat/transaction-query-search-direction
• feat/ttx-duration-histograms
• feat/unit-test-htlc-package
• feat_batchquery
• feature/adaptive-cache-strategy
• final-clean-pr
• finality-max-retry
• finding-autofix-6b075ebe
• fix/add-missing-db-indexes
• fix/auditor-check-inputs-and-recipients
• fix/certifier-comm-stack-size-guard
• fix/certifier-goroutine-leak
• fix/certifier-security-hardening
• fix/certifier-views-robustness
• fix/codewiki-broken-link
• fix/collect-endorsements-signer-is-me-gate
• fix/commit-pipeline-atomicity
• fix/commit-pipeline-global-recovery
• fix/fabricx-ledger-not-validated-status
• fix/finality-query-batch-drop
• fix/finality-queue-retry-logic
• fix/htlc-deadline-nondeterminism
• fix/htlc-scan-preimage-hash-mismatch
• fix/identity-register-recipient-order
• fix/issue-1484-coverage-config-v2
• fix/issue-1487-coverage-increase
• fix/issue-1488-coverage-selector
• fix/multi-store-safety
• fix/multisig-silent-error
• fix/notify-send-closed-channel-panic
• fix/retry-unbounded-backoff
• fix/scanner-toctou-double-spend
• fix/setup-listener-nil-panic
• fix/sherdlock-lock-leak
• fix/sherdlock-update-blocked-readers
• fix/sqlite-storage-test-failures
• fix/storage-numeric-amount
• fix/ttx-recipient-bind-order-and-remove-isme-cache
• fix/ttx-wallet-nil-check
• fix/typed-error-json-session
• fix/zkatdlog-auditor-input-commitment-check
• fsc1185
• fsc1188
• golangci-lint-update
• issue-1376
• issue-1489-nfttx-tests
• issue-1490
• issue-864-split-driver
• issue_templates
• main
• perf-storage-add-indexes
• perf/1432-lagrange-denom-cache
• perf/batchinverse-allocs-reduction
• perf/benchmark-executor-injection
• perf/benchmark-executor-metrics-and-report
• perf/csp-allocation-reduction
• perf/csp-ec-alloc-optimization
• perf/csp-executor-injection
• perf/executor-injection
• perf/zkatdlog-issue-auditor-service-benchmarks
• perf/zkatdlog-rp-optimizations
• perf/zkp-comp-optimization
• postgres-lock
• pr-1600
• range-proof-optimisation
• refactor/all-wallet-errors
• refactor/centralize-gnark-native-fields
• refactor/finality-deliveryqs-simplify
• refactor/identity-type-int32
• refactor/identity-type-int32-1423
• refactor/owner-wallet-error
• remove-skip-auditor-verification
• replica_local_check
• run_benchmarks_adjustments
• run_benchmarks_and_plot
• sec_1231_validate_signature
• sec_verify_identities
• security/tokens-validation
• soumya8898/metrics-wrappers
• soumya8898/transaction_validity
• test/certifier-coverage-gap
• test/certifier-driver-unit-tests
• test/certifier-unit-coverage
• test/config-unit-tests
• test/interop-encoding-unit-tests
• test/token-package-unit-tests-v2
• ttx/replace-random-nonce
• unit-test-token-package-1348
• unit-test/token-services-interop-htlc-script
• unit-test/ttx-recipients
• v0.10.1-preparation
• validator-profiling-doc
• validator-verifier-cache

Build # 25394171773

Build Type

Pull #1659

github

Committed by web-flow

Commit Message

Merge 607e6e7f6 into 814dad087

Pull Request Pull Request #1659: security: enforce strict input validation and payload bounds in tokens.Service (Fixes #1608)

Coverage Stats

224 of 312 new or added lines in 4 files covered. (71.79%)

10 existing lines in 3 files now uncovered.

35435 of 42986 relevant lines covered (82.43%)

16.89 hits per line