Skip to content

chore: btclightclient Hashes gRPC panic #1978

@RafilxTenfen

Description

@RafilxTenfen

Cantina AI BABY-6

x/btclightclient/keeper/grpc_query.go:37 does len(req.Pagination.Key) without nil check. Any unauthenticated caller can panic a node (recovered by the query server handling) by sending a gRPC request without the pagination field. The MainChain handler in the same file correctly handles nil pagination.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions