runtime: verify consensus state integrity for queries

oasisprotocol · Apr 26, 2022 · 87a978f · 87a978f
1 parent e1d8665
commit 87a978f
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 5 deletions.
diff --git a/.changelog/4694.feature.md b/.changelog/4694.feature.md
@@ -0,0 +1 @@
+runtime: verify consensus state integrity for queries
diff --git a/runtime/src/dispatcher.rs b/runtime/src/dispatcher.rs
@@ -462,11 +462,12 @@ impl Dispatcher {
         let txn_dispatcher = txn_dispatcher.clone();
 
         tokio::task::spawn_blocking(move || {
-            // For queries we don't do any consensus layer integrity verification.
-            let consensus_state = state
-                .consensus_verifier
-                .unverified_state(state.consensus_block)
-                .unwrap();
+            // Verify consensus state and runtime state root integrity before executing the query.
+            let consensus_state = state.consensus_verifier.verify(
+                state.consensus_block,
+                state.header.clone(),
+                state.epoch,
+            )?;
 
             let cache = cache_set.query(Root {
                 namespace: state.header.namespace,
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		runtime: verify consensus state integrity for queries