From 28b39267d990352883df1c093fd6c36cd532cfdf Mon Sep 17 00:00:00 2001
From: obscuren <geffobscura@gmail.com>
Date: Thu, 30 Apr 2015 13:41:47 +0200
Subject: core, eth: verify td of received blocks

---
 eth/handler.go | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

(limited to 'eth/handler.go')

diff --git a/eth/handler.go b/eth/handler.go
index 6cc69aa26..6c1a92c77 100644
--- a/eth/handler.go
+++ b/eth/handler.go
@@ -125,6 +125,7 @@ func NewProtocolManager(protocolVersion, networkId int, mux *event.TypeMux, txpo
 func (pm *ProtocolManager) removePeer(peer *peer) {
 	pm.pmu.Lock()
 	defer pm.pmu.Unlock()
+	pm.downloader.UnregisterPeer(peer.id)
 	delete(pm.peers, peer.id)
 }
 
@@ -223,7 +224,6 @@ func (pm *ProtocolManager) handle(p *peer) error {
 
 	pm.downloader.RegisterPeer(p.id, p.recentHash, p.requestHashes, p.requestBlocks)
 	defer func() {
-		pm.downloader.UnregisterPeer(p.id)
 		pm.removePeer(p)
 	}()
 
@@ -392,6 +392,12 @@ func (self *ProtocolManager) handleMsg(p *peer) error {
 
 				return nil
 			}
+
+			if err := self.verifyTd(p, request); err != nil {
+				glog.V(logger.Error).Infoln(err)
+				// XXX for now return nil so it won't disconnect (we should in the future)
+				return nil
+			}
 			self.BroadcastBlock(hash, request.Block)
 		} else {
 			// adding blocks is synchronous
@@ -406,6 +412,10 @@ func (self *ProtocolManager) handleMsg(p *peer) error {
 					glog.V(logger.Detail).Infoln("downloader err:", err)
 					return
 				}
+				if err := self.verifyTd(p, request); err != nil {
+					glog.V(logger.Error).Infoln(err)
+					return
+				}
 				self.BroadcastBlock(hash, request.Block)
 			}()
 		}
@@ -415,6 +425,16 @@ func (self *ProtocolManager) handleMsg(p *peer) error {
 	return nil
 }
 
+func (pm *ProtocolManager) verifyTd(peer *peer, request newBlockMsgData) error {
+	if request.Block.Td.Cmp(request.TD) != 0 {
+		glog.V(logger.Detail).Infoln(peer)
+
+		return fmt.Errorf("invalid TD on block(%v) from peer(%s): block.td=%v, request.td=%v", request.Block.Number(), peer.id, request.Block.Td, request.TD)
+	}
+
+	return nil
+}
+
 // BroadcastBlock will propagate the block to its connected peers. It will sort
 // out which peers do not contain the block in their block set and will do a
 // sqrt(peers) to determine the amount of peers we broadcast to.
-- 
cgit v1.2.3