Page 1 of 1
Validation bug fixed - please upgrade to nc0.3.24.64
Posted: Mon Oct 17, 2011 12:40 am
by vinced
A validation bug was found by lukejr. The code was not checking that the proof of work is attached to the parent coinbase and allowed it to be attached to any transaction. An attacker can create multiple namecoin blocks per parent block.
I have a fix in my repository.
khal - can you please update the official repository from my branches mergedmine and master?
Re: Validation bug fixed - please upgrade to nc0.3.24.64
Posted: Mon Oct 17, 2011 1:09 am
by vinced
To be clear: an immediate upgrade is required by everybody.
This is not a change to the validation rules. It is a missing validation rule and that is why it has to be applied immediately.
If you don't upgrade an attacker can cause you to get on an invalid fork of the chain and can rewrite the past since the last checkpoint.
Once the patch is applied that kind of fork will be ignored.
Re: Validation bug fixed - please upgrade to nc0.3.24.64
Posted: Mon Oct 17, 2011 9:01 am
by khal
I've updated the master branch of namecoin/namecoin (You should have done it yourself in this case.) and updated the linux binaries on the HP.
The mergedmine branch is not in namecoin/namecoin. Should i add it ?
Vinced, please, could delete bitcoin tags on your local repo :
Code: Select all
git tag -d v0.3.19 v0.3.20 v0.3.21 v0.3.21.91 v0.3.21rc v0.3.22 v0.3.22rc1 v0.3.22rc2 v0.3.22rc3 v0.3.22rc4 v0.3.22rc5 v0.3.22rc6 v0.3.23 v0.3.23rc1 v0.3.24.51-rc1 v0.3.24rc1 v0.3.24rc2 v0.3.20.2
And remote :
Code: Select all
git :refs/tags/tag :refs/tags/-d :refs/tags/v0.3.19 :refs/tags/v0.3.20 :refs/tags/v0.3.21 :refs/tags/v0.3.21.91 :refs/tags/v0.3.21rc :refs/tags/v0.3.22 :refs/tags/v0.3.22rc1 :refs/tags/v0.3.22rc2 :refs/tags/v0.3.22rc3 :refs/tags/v0.3.22rc4 :refs/tags/v0.3.22rc5 :refs/tags/v0.3.22rc6 :refs/tags/v0.3.23 :refs/tags/v0.3.23rc1 :refs/tags/v0.3.24.51-rc1 :refs/tags/v0.3.24rc1 :refs/tags/v0.3.24rc2 :refs/tags/v0.3.20.2
Re: Validation bug fixed - please upgrade to nc0.3.24.64
Posted: Mon Oct 17, 2011 1:50 pm
by Luke-Jr
Actually, only a majority of miners need to upgrade. Once that happens, those who don't will just be subject to a higher rate of invalids. Users who don't will need to wait for more confirmations.
Re: Validation bug fixed - please upgrade to nc0.3.24.64
Posted: Wed Nov 02, 2011 7:44 pm
by supra
Would love to upgrade but no binary for OS X.
Re: Validation bug fixed - please upgrade to nc0.3.24.64
Posted: Wed Jan 11, 2012 2:46 pm
by Reiko
Thanks for the information, I guess I better upgrade then...
