Concordium / Concordium/concordium-node

Use a verifier instead of catch_unwind when deserializing network messages.

Open
#96 2 comments 0 reactions 0 assignees View on GitHub
[Type] Maintenance [Type] Task
Dominant language
Haskell
Stars
108
Forks
24
Avg merge
2d 4h
Merged PRs (30d)
9

Description

**Task description**

Use a flatbuffers verifier instead of relying on catch_unwind.

Previously this was not easily possible since verifiers were not exposed, but version 2.0 of the flatbuffers dependency does expose a verifier, which we should use.

The verifier should check that internal offsets are valid and do not lead to out-of-bounds errors or other problematic behaviour.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.