Skip to content

chore: btclightclient Hashes gRPC panic #1978

Description

@RafilxTenfen

Cantina AI BABY-6

x/btclightclient/keeper/grpc_query.go:37 does len(req.Pagination.Key) without nil check. Any unauthenticated caller can panic a node (recovered by the query server handling) by sending a gRPC request without the pagination field. The MainChain handler in the same file correctly handles nil pagination.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions