Skip to content

Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

Critical severity GitHub Reviewed Published Aug 14, 2020 in nervosnetwork/ckb

Package

cargo ckb (Rust)

Affected versions

<= 0.34.1

Patched versions

0.34.2

Description

Impact

Tx-pool verify transaction which inputs' script contains load_cell_data_hash is nondeterministic

Workarounds

Enforce tx-pool ResolvedTrascation inputs' load data is none.

References

@doitian doitian published to nervosnetwork/ckb Aug 14, 2020
Published to the GitHub Advisory Database Feb 3, 2024
Reviewed Feb 3, 2024

Severity

Critical

EPSS score

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-q73f-w3h7-7wcc

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.