Giter Club home page Giter Club logo

Comments (12)

khalahan avatar khalahan commented on August 21, 2024

This line should not return false :
https://github.com/khalahan/namecoin/blob/1f2421d531c74fe290ff5bac90d9d528070b48e6/src/script.cpp#L1158

from namecoin-legacy.

khalahan avatar khalahan commented on August 21, 2024

A name_update will fail if previous value was more than 520 characters... Sad...
See http://dot-bit.org/forum/viewtopic.php?f=2&t=503

from namecoin-legacy.

muneeb-ali avatar muneeb-ali commented on August 21, 2024

This bug should be marked critical, IMO -- I've personally "lost" a few names because of this bug. A simple fix is to just reject input in both name_firstupdate() and in name_update() that is > 519 bytes. Also, namecoin documentation should reflect this limit instead of saying 1023 bytes.

Also, can someone share more details on the bug here? So others (including me) can try to fix the bug in namecoin itself? Thanks,

from namecoin-legacy.

phelixbtc avatar phelixbtc commented on August 21, 2024

Are we good on this by now?

from namecoin-legacy.

domob1812 avatar domob1812 commented on August 21, 2024

I think the consensus is that we should add the check to name_firstupdate and name_update to disallow too long values (according to snailbrain, there's already a check in the UI). The fork for actually allowing values up to 1023 bytes (if we really want that?) will be done later when we have discussed value length & fees a bit more.

@muneeb-ali: AFAIK, the problem is that Bitcoin's scripting system doesn't allow values larger than 520 bytes on the stack and fails when it encounters them. This leads to a failing signature check in the name_update if the name's value (which is part of the tx output script) is too large.

from namecoin-legacy.

domob1812 avatar domob1812 commented on August 21, 2024

BTW, can someone confirm what the actual maximum allowed length is? 519 bytes? 520 bytes? Then I will add the check to the RPC commands.

from namecoin-legacy.

domob1812 avatar domob1812 commented on August 21, 2024

Note that this was 'fixed' in the sense that the RPC commands now verify their input and only allow values up to (including) 520 characters. Should we close this issue?

from namecoin-legacy.

phelixbtc avatar phelixbtc commented on August 21, 2024

Maybe we should discuss this first on the forum...

from namecoin-legacy.

JeremyRand avatar JeremyRand commented on August 21, 2024

I would support closing this. The risk of losing a name is resolved, and increasing the value size is a much more complex issue that should be discussed separately.

from namecoin-legacy.

ryancdotorg avatar ryancdotorg commented on August 21, 2024

agree, close it

from namecoin-legacy.

JeremyRand avatar JeremyRand commented on August 21, 2024

Closing, thanks Ryan.

from namecoin-legacy.

phelixbtc avatar phelixbtc commented on August 21, 2024

For the record: values of up to 1023 can be created but after that the name must expire.

from namecoin-legacy.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.