Merge pull request #882

f11191a rpc: restrict number of fake outs requested in restricted rpc mode (moneromooo-monero)
This commit is contained in:
Riccardo Spagni 2016-07-06 18:17:08 +02:00
commit 0b65717a5d
No known key found for this signature in database
GPG key ID: 55432DF31CCD4FCD

View file

@ -41,6 +41,8 @@ using namespace epee;
#include "crypto/hash.h" #include "crypto/hash.h"
#include "core_rpc_server_error_codes.h" #include "core_rpc_server_error_codes.h"
#define MAX_RESTRICTED_FAKE_OUTS_COUNT 40
namespace cryptonote namespace cryptonote
{ {
@ -189,6 +191,16 @@ namespace cryptonote
{ {
CHECK_CORE_BUSY(); CHECK_CORE_BUSY();
res.status = "Failed"; res.status = "Failed";
if (m_restricted)
{
if (req.amounts.size() > 100 || req.outs_count > MAX_RESTRICTED_FAKE_OUTS_COUNT)
{
res.status = "Too many outs requested";
return true;
}
}
if(!m_core.get_random_outs_for_amounts(req, res)) if(!m_core.get_random_outs_for_amounts(req, res))
{ {
return true; return true;