From 8a3d62204097891b06d559b9cfde34ddf49fb245 Mon Sep 17 00:00:00 2001 From: Gregory Sanders Date: Tue, 18 Jun 2019 10:31:09 -0400 Subject: [PATCH] Disallow issuance-stuffing in tx deserialization --- src/primitives/transaction.h | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/primitives/transaction.h b/src/primitives/transaction.h index 92dc82142c..da0d0ca94a 100644 --- a/src/primitives/transaction.h +++ b/src/primitives/transaction.h @@ -212,6 +212,9 @@ public: // The asset fields are deserialized only if they are present. if (fHasAssetIssuance) { READWRITE(assetIssuance); + if (assetIssuance.IsNull()) { + throw std::ios_base::failure("Superfluous issuance record"); + } } else if (ser_action.ForRead()) { assetIssuance.SetNull(); }