rpc: restrict add_aux_pow

This commit is contained in:
hinto.janai
2026-04-10 13:49:43 +00:00
parent bbc838557e
commit 644a73867f
+10 -1
View File
@@ -2062,6 +2062,15 @@ namespace cryptonote
if (use_bootstrap_daemon_if_necessary<COMMAND_RPC_ADD_AUX_POW>(invoke_http_mode::JON_RPC, "add_aux_pow", req, res, r))
return r;
const bool restricted = m_restricted && ctx;
if (restricted && req.aux_pow.size() > 10)
{
error_resp.code = CORE_RPC_ERROR_CODE_RESTRICTED;
error_resp.message = "Too many aux pow hashes";
return false;
}
if (req.aux_pow.empty())
{
error_resp.code = CORE_RPC_ERROR_CODE_WRONG_PARAM;
@@ -2097,7 +2106,7 @@ namespace cryptonote
while ((1u << path_domain) < aux_pow.size())
++path_domain;
uint32_t nonce;
const uint32_t max_nonce = 65535;
const uint32_t max_nonce = restricted ? 16384 : 65535;
bool collision = true;
for (nonce = 0; nonce <= max_nonce; ++nonce)
{