Skip to content

feat: implement Platform Ban PoSe DIP-0031 #6613

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 8 commits into
base: develop
Choose a base branch
from

Conversation

knst
Copy link
Collaborator

@knst knst commented Mar 20, 2025

Issue being fixed or feature implemented

It implements DIP-0031

What was done?

Implemented p2p message in inventory system and functional tests for it.

How Has This Been Tested?

See test/functional/p2p_platform_ban.py

Breaking Changes

It bumps protocol version MIN_MASTERNODE_PROTO_VERSION for MN to 70236.

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have added or updated relevant unit/integration/functional/e2e tests
  • I have made corresponding changes to the documentation
  • I have assigned this pull request to a milestone

@knst knst added this to the 23 milestone Mar 20, 2025
Copy link

coderabbitai bot commented Mar 20, 2025

Walkthrough

This pull request integrates new functionality for handling platform ban messages within the masternode management system. The changes modify the deterministic masternode manager and related metadata classes to incorporate a new dependency that tracks masternode metadata, including platform bans. New methods and member variables have been introduced to set, check, and record platform bans along with their associated block heights. The protocol and network message processing layers have been updated to recognize a new PLATFORMBAN message type; corresponding processing logic, message serialization, and deserialization have been added. Updates to the chainstate initialization and protocol version constants reflect these enhancements. Additionally, functional tests and framework modifications ensure that platform ban messages are correctly handled in a peer-to-peer network environment.


📜 Recent review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 0a4ee4c and b94d725.

📒 Files selected for processing (1)
  • test/functional/p2p_platform_ban.py (1 hunks)
🚧 Files skipped from review as they are similar to previous changes (1)
  • test/functional/p2p_platform_ban.py
⏰ Context from checks skipped due to timeout of 90000ms (10)
  • GitHub Check: linux64_tsan-build / Build source
  • GitHub Check: linux64_multiprocess-build / Build source
  • GitHub Check: mac-build / Build source
  • GitHub Check: linux64_nowallet-build / Build source
  • GitHub Check: linux64_sqlite-build / Build source
  • GitHub Check: linux64_ubsan-build / Build source
  • GitHub Check: linux64_fuzz-build / Build source
  • GitHub Check: linux64-build / Build source
  • GitHub Check: arm-linux-build / Build source
  • GitHub Check: win64-build / Build source
✨ Finishing Touches
  • 📝 Generate Docstrings

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate docstrings to generate docstrings for this PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

🧹 Nitpick comments (7)
src/evo/deterministicmns.cpp (1)

843-847: Platform ban status management for masternodes.

This code properly integrates platform ban functionality with the ProUpServTx processing by attempting to revive platform ban status when a service update transaction is processed. The error handling correctly logs failures without disrupting the main transaction processing flow.

However, consider enhancing the log message to provide more details about why the platform ban status couldn't be updated (whether the metadata wasn't found or the SetPlatformBan call failed).

-                LogPrintf("CDeterministicMNManager::%s -- MN %s is not Platform revived at height %d\n", __func__,
-                          opt_proTx->proTxHash.ToString(), nHeight);
+                LogPrintf("CDeterministicMNManager::%s -- MN %s is not Platform revived at height %d: %s\n", __func__,
+                          opt_proTx->proTxHash.ToString(), nHeight, 
+                          meta_info ? "SetPlatformBan failed" : "metadata not found");
test/functional/p2p_platform_ban.py (1)

1-84: New test file properly implements platform ban validation

The test file correctly implements the platform ban functionality validation in a P2P context, with proper test setup, message creation, signing, and verification of the ban/unban process.

There are a few minor issues that could be addressed:

-from test_framework.util import p2p_port, wait_until_helper
+from test_framework.util import wait_until_helper
-for i in range(2):
+for _ in range(2):
-self.log.info(f"Platform ban message is created and signed")
+self.log.info("Platform ban message is created and signed")
🧰 Tools
🪛 Ruff (0.8.2)

12-12: test_framework.util.p2p_port imported but unused

Remove unused import: test_framework.util.p2p_port

(F401)


40-40: Loop control variable i not used within loop body

Rename unused i to _i

(B007)


63-63: f-string without any placeholders

Remove extraneous f prefix

(F541)

test/functional/test_framework/p2p.py (3)

162-162: Clarify future usage
The message type qsendrecsigs currently has no associated handler and is set to None. Confirm if this is intentional or if a handler is scheduled for future development.


594-596: Add callback logic or leave a note
These newly introduced callbacks (on_islock, on_mnlistdiff, on_platformban) are empty. Consider adding logging or a TODO comment for each to highlight expected functionality or testing.


598-598: Implement qgetdata callback
The newly reintroduced on_qgetdata is also empty. If needed, define the intended behavior or add a TODO note for clarity and future reference.

src/masternode/meta.h (2)

100-112: Validate ban logic
The SetPlatformBan method enforces increasing ban heights and disallows unbanning if the heights match. This is logical, but ensure all call sites handle the false return case properly.

+// Example: Check return value to confirm updates are applied
+if (!metaInfo->SetPlatformBan(true, newHeight)) {
+    // handle or log unsuccessful update
+}

182-205: PlatformBanMessage class introduction
This class effectively captures the required ban data, including the BLS signature. Ensure test coverage for serialization logic and hashing.

Add tests to confirm:

  1. Proper serialization paths (with and without SER_GETHASH).
  2. Hash consistency.
📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between acc2988 and 7b3e50b.

📒 Files selected for processing (14)
  • src/evo/deterministicmns.cpp (2 hunks)
  • src/evo/deterministicmns.h (2 hunks)
  • src/llmq/dkgsession.cpp (1 hunks)
  • src/masternode/meta.cpp (3 hunks)
  • src/masternode/meta.h (8 hunks)
  • src/net_processing.cpp (6 hunks)
  • src/node/chainstate.cpp (1 hunks)
  • src/protocol.cpp (4 hunks)
  • src/protocol.h (2 hunks)
  • src/version.h (3 hunks)
  • test/functional/p2p_platform_ban.py (1 hunks)
  • test/functional/test_framework/messages.py (1 hunks)
  • test/functional/test_framework/p2p.py (3 hunks)
  • test/functional/test_runner.py (1 hunks)
🧰 Additional context used
🧬 Code Definitions (1)
test/functional/test_framework/p2p.py (1)
test/functional/test_framework/messages.py (3) (3)
  • msg_platformban (2348-2380)
  • msg_qdata (2451-2492)
  • msg_qgetdata (2419-2448)
🪛 Ruff (0.8.2)
test/functional/p2p_platform_ban.py

12-12: test_framework.util.p2p_port imported but unused

Remove unused import: test_framework.util.p2p_port

(F401)


40-40: Loop control variable i not used within loop body

Rename unused i to _i

(B007)


63-63: f-string without any placeholders

Remove extraneous f prefix

(F541)

⏰ Context from checks skipped due to timeout of 90000ms (10)
  • GitHub Check: mac-build / Build source
  • GitHub Check: linux64_nowallet-build / Build source
  • GitHub Check: linux64_ubsan-build / Build source
  • GitHub Check: linux64_sqlite-build / Build source
  • GitHub Check: linux64_fuzz-build / Build source
  • GitHub Check: linux64-build / Build source
  • GitHub Check: win64-build / Build source
  • GitHub Check: linux64_multiprocess-build / Build source
  • GitHub Check: linux64_tsan-build / Build source
  • GitHub Check: arm-linux-build / Build source
🔇 Additional comments (39)
test/functional/test_runner.py (1)

146-146: New test script added for platform ban functionality.

This addition integrates the p2p_platform_ban.py test script into the test suite, correctly placed among tests that run in less than 60 seconds and annotated with the required dependency note.

src/evo/deterministicmns.cpp (1)

13-13: Added masternode metadata header.

Appropriate include for the new platform ban functionality.

src/protocol.h (2)

301-301: Added new platform ban message type.

This addition correctly declares the new PLATFORMBAN message type in the NetMsgType namespace.


528-528: Added platform ban message enum value.

The enum value is appropriately defined with a descriptive comment referencing DIP-0031. This provides context for the purpose of this new message type.

src/version.h (3)

14-14: Incremented protocol version.

Protocol version increment is appropriate for introducing a breaking change with the new platform ban functionality.


23-23: Updated minimum masternode protocol version.

This ensures all masternodes will support the new platform ban functionality, aligning with the PR objectives.


64-65: Added platform ban version constant.

Good practice to define a specific version constant for the new feature with a clear explanatory comment.

src/node/chainstate.cpp (1)

216-216: Added mn_metaman parameter to CDeterministicMNManager initialization

This change incorporates masternode metadata management by adding mn_metaman as a parameter when initializing CDeterministicMNManager. This is a critical integration point for the new platform ban functionality, allowing the deterministic masternode manager to access metadata about masternodes, including their platform ban status.

src/llmq/dkgsession.cpp (1)

496-504: Platform ban check implemented in DKG session verification

Added a check for platform-banned masternodes during the DKG connection verification process. If a masternode is platform banned, it will be marked with badConnection=true and excluded from participating in quorum formations. This change also improves efficiency by storing the metadata object reference in meta_info instead of repeatedly calling GetMetaInfo().

This implementation ensures that banned platform nodes cannot participate in DKG sessions, which is a core requirement of DIP-0031.

test/functional/test_framework/messages.py (1)

2348-2381: Added new msg_platformban class for P2P message handling

This class implements the new PLATFORMBAN message type for peer-to-peer communication, following the same pattern as other message types in the framework. It includes proper serialization, deserialization, and hash calculation functionality, which are essential for testing platform ban propagation.

The implementation correctly includes:

  1. Serialization of protx_hash, requested_height, quorum_hash, and signature
  2. Deserialization from network format
  3. A calc_sha256() method that follows the expected message format
  4. A clear string representation for debugging
src/evo/deterministicmns.h (3)

34-34: Forward declaration for new dependency looks good

Adding forward declaration for CMasternodeMetaMan class is appropriate since it's used as a reference parameter in the CDeterministicMNManager constructor.


569-569: New dependency member variable properly defined

The new private member variable m_mn_metaman is correctly defined as a reference, ensuring the lifetime management is handled appropriately.


577-581: Constructor correctly updated with dependency injection

The constructor signature has been updated to include the new CMasternodeMetaMan parameter, and the initialization list correctly initializes the new member variable. This follows the dependency injection pattern, which improves testability and follows SOLID principles.

src/protocol.cpp (4)

93-93: New PLATFORMBAN message type correctly defined

The new message type is correctly defined using the MAKE_MSG macro with the appropriate command string.


174-175: PLATFORMBAN message type added to allNetMessageTypes array

The new message type is correctly added to the comprehensive list of all network message types.


195-195: PLATFORMBAN message type added to blocks-relay-only policy exceptions

The new message type is correctly added to the netMessageTypesViolateBlocksOnly array, ensuring it's subject to the blocks-relay-only policy.


302-302: Added case for MSG_PLATFORM_BAN in GetCommandInternal

The new message type is correctly mapped in the GetCommandInternal method, enabling proper command string lookups for platform ban messages.

src/masternode/meta.cpp (3)

46-47: Added platform ban information to JSON output

The ToJson method now correctly includes platform ban status and update height in the JSON representation.


132-151: Platform ban tracking methods implemented

Three new methods are correctly implemented to manage platform bans:

  1. AlreadyHavePlatformBan: checks if a platform ban is already tracked
  2. GetPlatformBan: retrieves a platform ban message by hash
  3. RememberPlatformBan: adds a new platform ban to the tracking set

These methods are properly synchronized with the cs mutex to ensure thread safety.


162-162: Added GetHash method to PlatformBanMessage

The GetHash method uses the standard serialization hash function to generate a unique identifier for platform ban messages, which is essential for their storage and lookup.

src/net_processing.cpp (9)

41-41: Added appropriate header for enumeration value conversion

The inclusion of util/underlying.h provides the ToUnderlying function, which is used later for converting enum class values to their underlying integer type. This is a clean approach for handling enum values in logging and messaging.


2263-2264: LGTM: Added platform ban support to AlreadyHave inventory system

This properly extends the AlreadyHave function to check if a platform ban message is already known, integrating it with the existing masternode metadata manager. This is necessary for the proper functioning of the inventory system with the new message type.


2887-2893: LGTM: Proper handling of platform ban requests in ProcessGetData

This code correctly handles GETDATA requests for platform ban messages, checking if they exist in the masternode metadata manager and pushing the message to the peer if found. This follows the same pattern as other specialized message types in this function.


3522-3529: Proper implementation of early-return checks for platform ban messages

The method correctly validates that the message type matches before processing and checks that the blockchain is sufficiently synced. The early return pattern for validation checks is consistent with other message handling code in this file.


3531-3547: Thorough validation of incoming platform ban messages

The code properly deserializes the message and performs important validation on the specified masternode:

  1. Checks if the masternode exists in the current tip list
  2. Ensures the masternode is of the correct type (Evo)

This prevents misuse of the platform ban mechanism for nodes that shouldn't be subject to it.


3549-3559: Proper validation of platform ban height constraints

The code verifies that the ban height is within reasonable bounds (within a day's worth of blocks from the current tip), rejecting messages that are too old or implausibly in the future. This helps prevent replay attacks and ensures bans are applied in a relevant timeframe.

I appreciate the differentiated error handling with more severe penalties (10) for significantly out-of-range heights versus mild penalties (1) for borderline cases.


3561-3577: Robust signature verification for platform ban messages

The implementation properly:

  1. Retrieves the correct LLMQ type from consensus parameters
  2. Verifies the quorum exists for the provided hash
  3. Constructs the request ID and message hash for signature verification
  4. Verifies the signature against the quorum

This cryptographic validation is critical to ensure only authorized bans are processed. The use of SerializeHash for message data and the explicit prefix for request IDs follows best practices.


3579-3588: LGTM: Effective platform ban application and propagation

After successful validation, the code:

  1. Updates the masternode's metadata to mark it as banned
  2. Records the ban message for future reference
  3. Relays the ban to other nodes via the inventory system

The conditional check on SetPlatformBan ensures we only relay the message if the ban state actually changed, avoiding unnecessary network traffic.


5354-5354: LGTM: Proper integration with message processing flow

The call to ProcessPlatformBanMessage is correctly placed among other specialized message processing functions, maintaining the organizational structure of the codebase while integrating the new functionality.

test/functional/test_framework/p2p.py (2)

68-68: Acknowledge new message import
Adding msg_platformban here appears consistent with the new platform ban message type.


158-159:

❓ Verification inconclusive

Check message map consistency
Including platformban and qdata entries in MESSAGEMAP seems correct. Ensure that downstream code fully handles these new message types (deserialization, validation, etc.).

Run a quick search to confirm both message types are properly tested:


🏁 Script executed:

#!/bin/bash
rg -A 5 "msg_platformban|msg_qdata"

Length of output: 4009


Action: Verify Message Map and Downstream Handling for New Message Types

  • The mapping for both platformban and qdata in MESSAGEMAP (in test/functional/test_framework/p2p.py) is consistent.
  • The platformban message is exercised in tests (e.g. in test/functional/p2p_platform_ban.py) and its implementation is confirmed in test/functional/test_framework/messages.py.
  • The qdata message is defined in test/functional/test_framework/messages.py and included in the message map. However, there’s no evidence of dedicated tests for qdata—so please verify that its deserialization, validation, and error handling are fully exercised downstream (or consider adding tests if they are lacking).
src/masternode/meta.h (8)

8-8: Confirm necessity of new BLS include
Including <bls/bls.h> is appropriate for managing the new CBLSSignature usage. Confirm that all dependent build files or linking steps are updated.


51-52: Initialize platform ban state
The addition of m_platform_ban and m_platform_ban_height with concurrency guards is a well-structured approach for maintaining thread-safe ban state.


63-65: Copy constructor updates
Copying the platform ban fields ensures the ban state is preserved in all meta copies. Good practice for consistent object behavior.


72-74: Serialize/deserialize ban fields
Properly extending READWRITE to include m_platform_ban and m_platform_ban_height is correct. Ensure forward/backward compatibility if older code loads or stores this data.


113-117: Thread-safe accessor
IsPlatformBanned() is straightforward and leverages the recursive mutex for concurrency. Looks good.


172-181: High-level documentation
These new explanation comments about Platform PoSe Ban and DIP-0031 provide clarity on ban functionality. Good inclusion for maintainers.


239-241: Platform ban storage management
Methods AlreadyHavePlatformBan, GetPlatformBan, and RememberPlatformBan facilitate ban caching. Confirm the concurrency model in m_seen_platform_bans is well-tested to prevent race conditions with updates.


17-17:

✅ Verification successful

Ensure consistent use of <optional>
Including <optional> suggests new code relies on optional types. Double-check that no older compilers are impacted and that usage is consistent across the codebase.


🏁 Script executed:

#!/bin/bash
rg -A 3 "std::optional"

Length of output: 65770


Optional usage is consistent across the codebase.

The grep output confirms that the use of std::optional is widespread and consistent, aligning with the recent migration to C++17 and its header inclusion. There is no evidence that adding #include <optional> in src/masternode/meta.h introduces issues on supported compilers.

@knst knst marked this pull request as draft March 20, 2025 19:24
@knst knst force-pushed the platform-pose-ban branch from 7b3e50b to 2a9d6a0 Compare March 20, 2025 19:27
@thephez thephez added the P2P Some notable changes on p2p level label Mar 20, 2025
@knst knst marked this pull request as ready for review March 21, 2025 08:33
@knst knst requested review from UdjinM6 and PastaPastaPasta March 21, 2025 08:33
Copy link

github-actions bot commented Apr 3, 2025

This pull request has conflicts, please rebase.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 2a9d6a0 and 408ec51.

📒 Files selected for processing (9)
  • src/evo/deterministicmns.cpp (2 hunks)
  • src/evo/deterministicmns.h (2 hunks)
  • src/llmq/dkgsession.cpp (1 hunks)
  • src/masternode/meta.cpp (3 hunks)
  • src/masternode/meta.h (8 hunks)
  • src/net_processing.cpp (6 hunks)
  • src/node/chainstate.cpp (1 hunks)
  • src/protocol.cpp (4 hunks)
  • src/protocol.h (2 hunks)
🚧 Files skipped from review as they are similar to previous changes (7)
  • src/protocol.h
  • src/evo/deterministicmns.cpp
  • src/llmq/dkgsession.cpp
  • src/protocol.cpp
  • src/node/chainstate.cpp
  • src/masternode/meta.cpp
  • src/evo/deterministicmns.h
🧰 Additional context used
🧬 Code Graph Analysis (1)
src/net_processing.cpp (1)
src/util/underlying.h (1)
  • ToUnderlying (10-10)
🔇 Additional comments (22)
src/net_processing.cpp (14)

41-41: Appropriate addition of required header

The addition of util/underlying.h is necessary for the use of the ToUnderlying function which will be used in the platform ban message processing logic.


2263-2265: Well-integrated condition for platform ban handling

This addition to the AlreadyHave function properly integrates platform ban messages into the existing inventory system. The implementation correctly delegates to the masternode metadata manager to check if we already have a specific platform ban.


2887-2893: Properly implemented platform ban message retrieval

This addition to the ProcessGetData function handles the retrieval and sending of platform ban messages when requested by peers. The implementation follows the established pattern for other message types and properly uses the masternode metadata system.


3522-3527: Good initial validation for Platform Ban messages

The function correctly checks if the message type is appropriate and if the node is synced before processing the ban message. Blocking the processing of such messages during initial blockchain sync helps prevent potential issues during the sync process.


3528-3532: Well-structured message deserialization and logging

The implementation properly deserializes the platform ban message and logs useful information about it, which will help with debugging and monitoring.


3533-3540: Proper masternode validation

The code correctly validates that the masternode exists in the deterministic masternode list, with appropriate error handling if it doesn't. The small penalty for recent removals is an appropriate approach to handle edge cases during network updates.


3541-3547: Effective type validation with appropriate penalty

This section effectively validates that the target is an evolution node (Evo) and not a regular masternode. The significant penalty (100) for attempting to ban a node of incorrect type is appropriate for preventing misuse.


3548-3559: Robust height validation logic

The height validation checks ensure the platform ban message refers to a relevant and recent block height, with the day_of_blocks variable providing a clear time window. The tiered penalty approach (10 for significant deviation vs 1 for edge cases) is a good balance.


3560-3567: Comprehensive quorum validation

The code properly validates the quorum information by checking that the specified quorum exists for the platform ban message. The clear error message with detailed information will assist in debugging issues.


3568-3573: Secure message signing setup

The implementation establishes a secure process for signature verification by constructing a well-defined request ID and message hash. The use of a prefixed identifier helps prevent signature reuse attacks across different message types.


3574-3578: Robust signature verification

The code properly verifies the signature using the LLMQ verification system, checking it against the active chain for the specified height. The detailed error logging will be valuable for troubleshooting.


3579-3587: Effective state update and message propagation

Once validation is complete, the code properly updates the masternode metadata to record the platform ban status, remembers the platform ban message for future reference, and relays it to other nodes. This ensures proper propagation of valid ban messages throughout the network.


5355-5355: Well-positioned message processing call

The addition of ProcessPlatformBanMessage to the message processing chain is placed at the right location, along with other similar message types. The processing result is also handled correctly using the ProcessPeerMsgRet function.


3564-3564: Proper enum conversion using ToUnderlying

The use of ToUnderlying here is appropriate for converting the enum value to its integer representation for logging purposes. This follows best practices for type-safe enum handling.

src/masternode/meta.h (8)

8-8: Appropriate inclusion of necessary headers.

The addition of <bls/bls.h> is needed for the CBLSSignature type used in the new PlatformBanMessage class, and <optional> supports the new return type in GetPlatformBan.

Also applies to: 17-17


51-52: Thread-safe implementation of platform ban properties.

The new member variables for platform ban state are correctly declared with proper mutex protection and reasonable default values. The naming convention is consistent with the codebase style.


63-65: Copy constructor properly handles new ban fields.

The constructor correctly initializes the new platform ban state from the reference object, maintaining consistency with existing implementation patterns.


72-74: Serialization updated to include new platform ban fields.

The SERIALIZE_METHODS are properly updated to include the new platform ban state in the serialization process, ensuring persistence of this data.


100-117: Well-designed platform ban state management methods.

The new SetPlatformBan and IsPlatformBanned methods are properly implemented with:

  • Thread safety through mutex locking
  • Logic to prevent overriding a ban with an older ban height
  • Prevention of unsetting a ban at the same height
  • Clear return value indicating operation success

This provides a robust interface for managing platform ban state.


172-204: Well-documented PlatformBanMessage class implementation.

The new class is properly structured with:

  • Clear documentation explaining its purpose and relation to DIP-0031
  • Appropriate member variables for ban message data
  • Proper serialization handling with special case for hash calculation
  • Declaration of the GetHash method

The implementation follows good practices for serialization by excluding the signature when computing the hash.


216-216: Thread-safe tracking of platform ban messages.

The new member variable m_seen_platform_bans is properly declared as a map with mutex protection, enabling the class to track and deduplicate platform ban messages.


239-241: Complete API for platform ban message management.

The three new methods provide a comprehensive interface for:

  • Checking if a platform ban message has already been seen
  • Retrieving a platform ban message by hash
  • Recording new platform ban messages

The return of an optional value from GetPlatformBan is a modern and safe approach.

Comment on lines +185 to +204
class PlatformBanMessage
{
public:
uint256 m_protx_hash;
int32_t m_requested_height{0};
uint256 m_quorum_hash;
CBLSSignature m_signature;

PlatformBanMessage() = default;

SERIALIZE_METHODS(PlatformBanMessage, obj)
{
READWRITE(obj.m_protx_hash, obj.m_requested_height, obj.m_quorum_hash);
if (!(s.GetType() & SER_GETHASH)) {
READWRITE(CBLSSignatureVersionWrapper(const_cast<CBLSSignature&>(obj.m_signature), false));
}
}

uint256 GetHash() const;
};
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Verify signature validation for platform ban messages.

The PlatformBanMessage class handles serialization correctly, but ensure that signature validation is implemented in the corresponding cpp file. The class would benefit from a method to verify the signature against the hashed message data.


🏁 Script executed:

#!/bin/bash
# Check if there's signature validation logic for PlatformBanMessages
echo "Searching for PlatformBanMessage signature validation..."
rg -A 10 "bool.*PlatformBanMessage.*[Vv]alidat" --type cpp

Length of output: 183


Action: Add Signature Verification Logic for PlatformBanMessage

It appears that the current implementation in src/masternode/meta.h only handles serialization and hash generation (via GetHash()), but no signature validation method is present in the corresponding source file. To ensure robust security for platform ban messages, please add a dedicated method (for example, bool ValidateSignature() const) in the corresponding CPP file (likely src/masternode/meta.cpp) that verifies the signature (m_signature) against the message hash.

  • File to update: src/masternode/meta.cpp (or the appropriate implementation file for PlatformBanMessage)
  • Action required: Implement signature validation using the hashed message data (obtained by GetHash()).
  • Recommendation: Confirm that the cryptographic routine used to validate CBLSSignature is correctly integrated.

Copy link

This pull request has conflicts, please rebase.

@knst knst force-pushed the platform-pose-ban branch from 408ec51 to c02ad41 Compare May 6, 2025 08:29
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

🧹 Nitpick comments (11)
test/functional/p2p_platform_ban.py (11)

2-2: Update copyright year to reflect current year.

The copyright year is set to 2025, which is in the future. This should be corrected to the current year (2024).

-# Copyright (c) 2025 The Dash Core developers
+# Copyright (c) 2024 The Dash Core developers

16-19: Consider implementing message handling methods in PlatformBanInterface.

The PlatformBanInterface class extends P2PInterface but doesn't implement any additional functionality. Consider adding message handling methods like on_platformban() to process incoming platform ban messages.

class PlatformBanInterface(P2PInterface):
    def __init__(self):
        super().__init__()
+
+    def on_platformban(self, message):
+        """Handle incoming platform ban messages."""
+        self.message_count["platformban"] = self.message_count.get("platformban", 0) + 1

43-43: Remove unused variable assignment.

The self.mempool_size variable is set but never used elsewhere in the test. Consider removing it if not needed.

-        self.mempool_size = 0

52-53: Add a comment explaining the request ID generation logic.

The request ID generation combines several elements but lacks documentation explaining the rationale. Consider adding a comment to clarify the purpose and format of this identifier.

+        # Generate request ID by combining the ban message intent ("PlatformPoSeBan"), target proTxHash, and requested height
        request_id_buf = ser_string(b"PlatformPoSeBan") + ser_uint256(msg.protx_hash) + struct.pack("<I", msg.requested_height)
        request_id = hash256(request_id_buf)[::-1].hex()

60-61: Add comment explaining the use of platform signing.

The use_platformsign=True parameter suggests there are different signing mechanisms. Consider adding a comment to explain why platform signing is used specifically for this test case.

+        # Use platform signing specifically for platform ban messages
        recsig = self.get_recovered_sig(request_id, msg_hash, llmq_type=106, use_platformsign=True)
        msg.sig = bytearray.fromhex(recsig["sig"])

66-67: Extract timeout value to a constant and add assertion message.

The timeout value is hardcoded. Consider extracting it to a constant and adding an assertion message to improve test readability and maintainability.

+        PLATFORMBAN_TIMEOUT = 10
-        wait_until_helper(lambda: p2p_node2.message_count["platformban"] > 0, timeout=10, lock=p2p_lock)
+        wait_until_helper(lambda: p2p_node2.message_count["platformban"] > 0, timeout=PLATFORMBAN_TIMEOUT, 
+                         lock=p2p_lock, err_msg="Timed out waiting for platformban message")
        p2p_node2.message_count["platformban"] = 0

70-70: Add descriptive assertion message.

Add a descriptive message to the assertion to make test failures more informative.

-        assert not self.check_banned(self.mninfo[0])
+        assert not self.check_banned(self.mninfo[0]), "Masternode should not be banned after a single platform ban message"

77-77: Add descriptive assertion message.

Add a descriptive message to the assertion to make test failures more informative.

-        assert self.check_banned(self.mninfo[0])
+        assert self.check_banned(self.mninfo[0]), "Masternode should be banned after receiving platform ban message with valid quorum"

80-80: Add descriptive assertion message.

Add a descriptive message to the assertion to make test failures more informative.

-        assert not self.check_banned(self.mninfo[0])
+        assert not self.check_banned(self.mninfo[0]), "Masternode ban should be cleared after service update"

21-81: Add docstrings to classes and methods.

The test class and methods lack documentation. Consider adding docstrings to explain the purpose of the test and its methods.

class PlatformBanMessagesTest(DashTestFramework):
+    """
+    Test for the platform ban functionality as defined in DIP-0031.
+    Verifies that platform ban messages are correctly processed, leading to masternode bans,
+    and that the bans can be cleared through service updates.
+    """
    def set_test_params(self):
        self.set_dash_test_params(1, 0, [[]], evo_count=3)

    def skip_test_if_missing_module(self):
        self.skip_if_no_wallet()

    def check_banned(self, mn):
+        """Check if a masternode is currently banned based on its PoSeBanHeight."""
        info = self.nodes[0].protx('info', mn.proTxHash)
        return info['state']['PoSeBanHeight'] != -1

    def run_test(self):
+        """
+        Main test method:
+        1. Set up test environment with sporks and masternodes
+        2. Create and sign a platform ban message
+        3. Verify the ban is not applied after a single message
+        4. Mine additional quorums and send the message again
+        5. Verify the ban is applied
+        6. Update the masternode service and verify the ban is cleared
+        """

1-84: The test implements the platform ban functionality well but could be more robust.

Overall, the test provides good coverage of the platform ban functionality described in DIP-0031. It tests message creation, transmission, ban application, and ban clearing. The implementation appears correct, but some improvements could make the test more robust:

  1. Consider testing additional edge cases like:

    • Invalid signatures
    • Messages from non-quorum members
    • Attempts to ban non-existent masternodes
    • Repeated ban messages
  2. The test could benefit from more explicit validation of the ban mechanism's implementation details, such as:

    • Verifying the correct ban reason is recorded
    • Checking ban persistence across node restarts
    • Testing the effect of bans on masternode payments
📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 408ec51 and c02ad41.

📒 Files selected for processing (14)
  • src/evo/deterministicmns.cpp (2 hunks)
  • src/evo/deterministicmns.h (2 hunks)
  • src/llmq/dkgsession.cpp (1 hunks)
  • src/masternode/meta.cpp (2 hunks)
  • src/masternode/meta.h (8 hunks)
  • src/net_processing.cpp (6 hunks)
  • src/node/chainstate.cpp (1 hunks)
  • src/protocol.cpp (4 hunks)
  • src/protocol.h (2 hunks)
  • src/version.h (3 hunks)
  • test/functional/p2p_platform_ban.py (1 hunks)
  • test/functional/test_framework/messages.py (1 hunks)
  • test/functional/test_framework/p2p.py (4 hunks)
  • test/functional/test_runner.py (1 hunks)
✅ Files skipped from review due to trivial changes (1)
  • test/functional/test_runner.py
🚧 Files skipped from review as they are similar to previous changes (12)
  • src/protocol.h
  • src/llmq/dkgsession.cpp
  • src/evo/deterministicmns.cpp
  • src/masternode/meta.cpp
  • src/protocol.cpp
  • src/version.h
  • src/node/chainstate.cpp
  • test/functional/test_framework/p2p.py
  • test/functional/test_framework/messages.py
  • src/evo/deterministicmns.h
  • src/net_processing.cpp
  • src/masternode/meta.h
⏰ Context from checks skipped due to timeout of 90000ms (10)
  • GitHub Check: arm-linux-build / Build source
  • GitHub Check: linux64_sqlite-build / Build source
  • GitHub Check: linux64-build / Build source
  • GitHub Check: linux64_fuzz-build / Build source
  • GitHub Check: linux64_ubsan-build / Build source
  • GitHub Check: mac-build / Build source
  • GitHub Check: linux64_multiprocess-build / Build source
  • GitHub Check: linux64_tsan-build / Build source
  • GitHub Check: linux64_nowallet-build / Build source
  • GitHub Check: win64-build / Build source

@UdjinM6
Copy link

UdjinM6 commented May 6, 2025

tests are failing

@knst
Copy link
Collaborator Author

knst commented May 7, 2025

tests are failing

yes, it is indeed failing due to more strict validations during mining quorum, introduced by #6645
Should succeed now

@PastaPastaPasta PastaPastaPasta requested a review from Copilot May 13, 2025 14:37
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR implements DIP-0031 by adding support for a new platform ban P2P message and associated functionality. Key changes include:

  • Introducing the new platformban message in the P2P layer and updating protocol/version definitions.
  • Adding functional tests and test framework support for platform ban.
  • Updating masternode metadata and deterministic masternode manager to incorporate platform ban status.

Reviewed Changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
test/functional/test_runner.py Added p2p_platform_ban.py to the list of functional tests
test/functional/test_framework/p2p.py Registered new msg_platformban and added related handler callbacks
test/functional/test_framework/messages.py Introduced msg_platformban with serialization support
test/functional/p2p_platform_ban.py Implemented a functional test for the platform ban message
src/version.h Bumped protocol and masternode protocol versions
src/protocol.h & src/protocol.cpp Registered new platformban message type in the protocol
src/net_processing.cpp Added processing logic for PLATFORMBAN messages and integrated them
src/masternode/meta.h & src/masternode/meta.cpp Extended masternode metadata to track platform ban information
src/llmq/dkgsession.cpp Updated connection verification to reject Platform PoSe banned nodes
src/evo/deterministicmns.h & src/evo/deterministicmns.cpp Updated deterministic MN manager to include platform ban checks

Comment on lines +3522 to +3523
PeerMsgRet PeerManagerImpl::ProcessPlatformBanMessage(CNode& pfrom, std::string_view msg_type, CDataStream& vRecv)
{
Copy link
Preview

Copilot AI May 13, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] Consider adding a brief docstring or inline comment for ProcessPlatformBanMessage to clarify its validation logic and the meaning of returned error codes, aiding future maintainers.

Suggested change
PeerMsgRet PeerManagerImpl::ProcessPlatformBanMessage(CNode& pfrom, std::string_view msg_type, CDataStream& vRecv)
{
/**
* Process a PLATFORMBAN message received from a peer.
*
* @param pfrom The peer sending the message.
* @param msg_type The type of the message (should be PLATFORMBAN).
* @param vRecv The serialized message data.
* @return A PeerMsgRet object indicating the result of processing:
* - An empty object if the message is invalid or ignored.
* - An error code if the message is malformed or violates protocol rules.
*
* Validation logic:
* - The function does nothing if the node is not synchronized with the blockchain.
* - The message is deserialized and logged for further processing.
*/
PeerMsgRet PeerManagerImpl::ProcessPlatformBanMessage(CNode& pfrom, std::string_view msg_type, CDataStream& vRecv)

Copilot uses AI. Check for mistakes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
P2P Some notable changes on p2p level
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants