]> git.bitcoin.ninja Git - rust-lightning/commit
projects / rust-lightning / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0ca9faf) | patch
Authenticate payment_id from OffersContext
authorJeffrey Czyz <jkczyz@gmail.com>
Thu, 18 Jul 2024 16:54:33 +0000 (11:54 -0500)
committerJeffrey Czyz <jkczyz@gmail.com>
Wed, 14 Aug 2024 15:42:17 +0000 (10:42 -0500)
commitbb445a3973957b5046e2354992901fb675198cad
tree7e862ff3f0486252f7533a272adac353b8f327b7tree | snapshot
parent0ca9faf0783ec7eecb5dac5c436411da71583ac7commit | diff
Authenticate payment_id from OffersContext

Before abandoning a payment when receiving an InvoiceError, verify that
the PaymentId included in the OffersContext with the included HMAC. This
prevents a malicious actor sending an InvoiceError with a known payment
id from abandoning our payment.
lightning/src/ln/channelmanager.rs diff | blob | history
Personal fork of Rust-Lightning. Upstream is https://github.com/rust-bitcoin/rust-lightning