Skip to content

Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

Critical severity GitHub Reviewed Published Aug 14, 2020 in nervosnetwork/ckb

Package

cargo ckb (Rust)

Affected versions

<= 0.34.1

Patched versions

0.34.2

Description

Impact

Tx-pool verify transaction which inputs' script contains load_cell_data_hash is nondeterministic

Workarounds

Enforce tx-pool ResolvedTrascation inputs' load data is none.

References

@doitian doitian published to nervosnetwork/ckb Aug 14, 2020
Published to the GitHub Advisory Database Feb 3, 2024
Reviewed Feb 3, 2024

Severity

Critical

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-q73f-w3h7-7wcc

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.