hyperledger-labs / fabric-smart-client / 29744281276 / 2
81%
main: 81%

DEFAULT BRANCH: main
Ran
Files 272
Run time 16s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 30.288% (-0.02%) from 30.307%
29744281276.2

push

github

web-flow 
fix(security): harden responder-view input validation and endorsement checks (#1594)

* fix(security): harden responder-view input validation and endorsement checks

Malformed or adversarial input from a remote peer over a P2P session could
panic a responder goroutine, leak internal error detail back to the caller,
or bypass endorsement signature/binding verification. This adds explicit
validation at the wire-deserialization boundary and enforces endorsement
verification on both the sequential and parallel collection paths.

Refs #1593

Signed-off-by: Angelo De Caro <adc@zurich.ibm.com>

* fix(security): address PR #1594 review comments

- Fix "filed getting rw set" -> "failed getting rw set" typo in the
  Namespaces() panic message and its test expectation.
- Name the receiveView receive-timeout constant instead of an inline
  magic number, matching the existing session-level default.
- Bound the previously-unbounded wait on answerChannel in
  parallelCollectEndorsementsOnProposalView.Call: session
  establishment/send inside collectEndorsement (and the wait itself)
  were not covered by WithTimeout, whose value defaults to zero at the
  only production call site. Add an aggregate deadline that applies
  even when WithTimeout is never called.

Signed-off-by: Angelo De Caro <adc@zurich.ibm.com>

---------

Signed-off-by: Angelo De Caro <adc@zurich.ibm.com>

5334 of 17611 relevant lines covered (30.29%)

36.95 hits per line

Source Files on job itest-fsc-pingpong - 29744281276.2