mirror of
https://github.com/lightninglabs/loop.git
synced 2026-08-13 12:33:03 +02:00
e4c4e11627
When loopd is started without --experimental the swap client server's reservationManager and instantOutManager are nil. ListReservations already returns codes.Unimplemented in that case; the rest of the instant-out / reservation RPC family didn't, and would dereference a nil pointer. Affected handlers (all of which now return the same Unimplemented status): - ReservationRequest (new in PR #883) - ReservationQuote (new in PR #883) - InstantOut - InstantOutQuote - ListInstantOuts Without this fix an authenticated caller can crash the daemon by invoking any of these RPCs against a non-experimental loopd. With default localhost binding the attack surface is small, but loop is also commonly fronted by lit / LSP wrappers that expose RPCs to other internal services, so a single packet is enough for a remote DoS. |
||
|---|---|---|
| .. | ||
| config.go | ||
| config_test.go | ||
| daemon.go | ||
| daemon_test.go | ||
| htlc_confirmed_recovery.go | ||
| htlc_confirmed_recovery_test.go | ||
| log.go | ||
| macaroons.go | ||
| migration.go | ||
| register_default.go | ||
| run.go | ||
| static_loopin_status_updater.go | ||
| swapclient_server.go | ||
| swapclient_server_debug.go | ||
| swapclient_server_deposit_test.go | ||
| swapclient_server_staticaddr_test.go | ||
| swapclient_server_test.go | ||
| sweep_htlc.go | ||
| sweep_htlc_test.go | ||
| utils.go | ||
| view.go | ||