Validation bug fixed - please upgrade to nc0.3.24.64

Post Reply
vinced
Posts: 63
Joined: Wed May 18, 2011 1:16 am

Validation bug fixed - please upgrade to nc0.3.24.64

Post by vinced » Mon Oct 17, 2011 12:40 am

A validation bug was found by lukejr. The code was not checking that the proof of work is attached to the parent coinbase and allowed it to be attached to any transaction. An attacker can create multiple namecoin blocks per parent block.

I have a fix in my repository.

khal - can you please update the official repository from my branches mergedmine and master?
!v | Namecoin founder | https://dot-bit.org/

vinced
Posts: 63
Joined: Wed May 18, 2011 1:16 am

Re: Validation bug fixed - please upgrade to nc0.3.24.64

Post by vinced » Mon Oct 17, 2011 1:09 am

To be clear: an immediate upgrade is required by everybody.

This is not a change to the validation rules. It is a missing validation rule and that is why it has to be applied immediately.

If you don't upgrade an attacker can cause you to get on an invalid fork of the chain and can rewrite the past since the last checkpoint.

Once the patch is applied that kind of fork will be ignored.
!v | Namecoin founder | https://dot-bit.org/

khal
Site Admin
Posts: 708
Joined: Mon May 09, 2011 5:09 pm
os: linux

Re: Validation bug fixed - please upgrade to nc0.3.24.64

Post by khal » Mon Oct 17, 2011 9:01 am

I've updated the master branch of namecoin/namecoin (You should have done it yourself in this case.) and updated the linux binaries on the HP.

The mergedmine branch is not in namecoin/namecoin. Should i add it ?


Vinced, please, could delete bitcoin tags on your local repo :

Code: Select all

git tag -d v0.3.19 v0.3.20 v0.3.21 v0.3.21.91 v0.3.21rc v0.3.22 v0.3.22rc1 v0.3.22rc2 v0.3.22rc3 v0.3.22rc4 v0.3.22rc5 v0.3.22rc6 v0.3.23 v0.3.23rc1 v0.3.24.51-rc1 v0.3.24rc1 v0.3.24rc2 v0.3.20.2
And remote :

Code: Select all

git :refs/tags/tag :refs/tags/-d :refs/tags/v0.3.19 :refs/tags/v0.3.20 :refs/tags/v0.3.21 :refs/tags/v0.3.21.91 :refs/tags/v0.3.21rc :refs/tags/v0.3.22 :refs/tags/v0.3.22rc1 :refs/tags/v0.3.22rc2 :refs/tags/v0.3.22rc3 :refs/tags/v0.3.22rc4 :refs/tags/v0.3.22rc5 :refs/tags/v0.3.22rc6 :refs/tags/v0.3.23 :refs/tags/v0.3.23rc1 :refs/tags/v0.3.24.51-rc1 :refs/tags/v0.3.24rc1 :refs/tags/v0.3.24rc2 :refs/tags/v0.3.20.2
NamecoinID: id/khal
GPG : 9CC5B92E965D69A9
NMC: N1KHAL5C1CRzy58NdJwp1tbLze3XrkFxx9
BTC: 1KHAL8bUjnkMRMg9yd2dNrYnJgZGH8Nj6T

Register Namecoin domains with BTC
My bitcoin Identity - Send messages to bitcoin users
Charity Ad - Make a good deed without paying a cent

Luke-Jr
Posts: 13
Joined: Wed Aug 10, 2011 3:33 am
os: linux

Re: Validation bug fixed - please upgrade to nc0.3.24.64

Post by Luke-Jr » Mon Oct 17, 2011 1:50 pm

Actually, only a majority of miners need to upgrade. Once that happens, those who don't will just be subject to a higher rate of invalids. Users who don't will need to wait for more confirmations.

supra
Posts: 6
Joined: Wed Nov 02, 2011 6:33 pm

Re: Validation bug fixed - please upgrade to nc0.3.24.64

Post by supra » Wed Nov 02, 2011 7:44 pm

Would love to upgrade but no binary for OS X.

Reiko
Posts: 1
Joined: Wed Jan 11, 2012 2:40 pm
os: windows

Re: Validation bug fixed - please upgrade to nc0.3.24.64

Post by Reiko » Wed Jan 11, 2012 2:46 pm

Thanks for the information, I guess I better upgrade then... :)

Post Reply