GHSA-q73f-w3h7-7wcc: Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

Skip to content

Sign in

GHSA-q73f-w3h7-7wcc

• • Actions

    Automate any workflow

  • Packages

    Host and manage packages

  • Security

    Find and fix vulnerabilities

  • Codespaces

    Instant dev environments

  • Copilot

    Write better code with AI

  • Code review

    Manage code changes

  • Issues

    Plan and track work

  • Discussions

    Collaborate outside of code

Explore

*   All features
*   Documentation
*   GitHub Skills
*   Blog

• For

  • Enterprise
  • Teams
  • Startups
  • Education

  By Solution

  • CI/CD & Automation
  • DevOps
  • DevSecOps

  Resources

  • Learning Pathways
  • White papers, Ebooks, Webinars
  • Customer Stories
  • Partners

• • GitHub Sponsors

    Fund open source developers

*   The ReadME Project
    
    GitHub community articles
    

Repositories

*   Topics
*   Trending
*   Collections

• Pricing

Search code, repositories, users, issues, pull requests…

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches****Use saved searches to filter your results more quickly

Sign in

Sign up

1. GitHub Advisory Database
2. GitHub Reviewed
3. GHSA-q73f-w3h7-7wcc

Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

Critical severity GitHub Reviewed Published Aug 14, 2020 in nervosnetwork/ckb

Vulnerability details Dependabot alerts 0

Package

cargo ckb (Rust)

Affected versions

<= 0.34.1

Patched versions

0.34.2

Description

Impact

Tx-pool verify transaction which inputs’ script contains load_cell_data_hash is nondeterministic

Workarounds

Enforce tx-pool ResolvedTrascation inputs’ load data is none.

References

• GHSA-q73f-w3h7-7wcc
• nervosnetwork/ckb@01eb5b2
• nervosnetwork/ckb@fe83220
• nervosnetwork/ckb@ff88b48

doitian published to nervosnetwork/ckb

Aug 14, 2020

Published to the GitHub Advisory Database

Feb 3, 2024

Reviewed

Feb 3, 2024

Severity

Critical

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-q73f-w3h7-7wcc

Source code

No known source code

Checking history

See something to contribute? Suggest improvements for this vulnerability.