mirror of
https://github.com/ZmnSCPxj/clboss.git
synced 2026-08-13 12:33:20 +02:00
3c8dc3c16d
The claim of a returning self-payment matched payment_hash and payment_secret but not the HTLC amount. Answering the hook with resolve settles the HTLC at once, so lightningd's own final_incorrect_htlc_amount check is skipped. The last-hop peer relays our onion (and thus the secret) intact but chooses the offered amount, so it could settle a reduced HTLC, learn the preimage, and claim the full amount upstream. Record the intended amount at Claimer::generate() time and resolve only an exact match; a mismatch is left to normal handling, which fails the HTLC for lack of an invoice. The same issue was recently fixed in sling (daywalker90/sling@835f36e8). Fixes #322. |
||
|---|---|---|
| .. | ||
| Mod | ||
| ModG | ||
| Msg | ||
| concurrent.cpp | ||
| concurrent.hpp | ||
| JsonInput.cpp | ||
| JsonInput.hpp | ||
| log.cpp | ||
| log.hpp | ||
| Main.cpp | ||
| Main.hpp | ||
| open_rpc_socket.cpp | ||
| open_rpc_socket.hpp | ||
| random_engine.cpp | ||
| random_engine.hpp | ||
| Shutdown.hpp | ||
| Signer.cpp | ||
| Signer.hpp | ||