Concordium / Concordium/concordium-node
Use a verifier instead of catch_unwind when deserializing network messages.
Open
[Type] Maintenance
[Type] Task
- Dominant language
- Haskell
- Stars
- 108
- Forks
- 24
- Avg merge
- 2d 4h
- Merged PRs (30d)
- 9
Description
**Task description**
Use a flatbuffers verifier instead of relying on catch_unwind.
Previously this was not easily possible since verifiers were not exposed, but version 2.0 of the flatbuffers dependency does expose a verifier, which we should use.
The verifier should check that internal offsets are valid and do not lead to out-of-bounds errors or other problematic behaviour.
Contributor guide
Assessment
This issue has not been assessed yet.