Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: disallow multiple localhost connections #3169

Merged

Conversation

damiannolan
Copy link
Member

Description

Adds basic checks to clientID on MsgConnectionOpenInit and MsgConnectionOpenTry basic validation.

closes: #3167

Commit Message / Changelog Entry

NA

see the guidelines for commit messages. (view raw markdown for examples)


Before we can merge this PR, please make sure that all the following items have been
checked off. If any of the checklist items are not applicable, please leave them but
write a little note why.

  • Targeted PR against correct branch (see CONTRIBUTING.md).
  • Linked to Github issue with discussion and accepted design OR link to spec that describes this work.
  • Code follows the module structure standards and Go style guide.
  • Wrote unit and integration tests.
  • Updated relevant documentation (docs/) or specification (x/<module>/spec/).
  • Added relevant godoc comments.
  • Provide a commit message to be used for the changelog entry in the PR description for review.
  • Re-reviewed Files changed in the Github PR explorer.
  • Review Codecov Report in the comment section below once CI passes.

@damiannolan
Copy link
Member Author

NOTE: this is only added to INIT and TRY as the client ID isn't available directly on ACK and CONFIRM msgs. It is probably not required on the TRY msg checks but I think its no harm to add it.

Copy link
Contributor

@colin-axner colin-axner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Quick one! Great job!

Comment on lines +109 to +111
if msg.ClientId == exported.Localhost {
return sdkerrors.Wrap(clienttypes.ErrInvalidClientType, "localhost connetion handshakes are disallowed")
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this isn't strictly necessary as there should not exist a connection in INIT which would have a valid consensus state stored for the localhost. But, I think it makes sense to be clear/defensive

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, exactly! This was my thinking too :)

@colin-axner
Copy link
Contributor

ACK and CONFIRM do not need the checks because they would require an existing connection with the localhost client ID. There will be only one existing connection in OPEN state, thus negating any usage with ACK and CONFIRM which require the connection state to be in INIT or TRY on the counterparty side

Copy link
Contributor

@chatton chatton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Nice job 👍

@damiannolan damiannolan merged commit fe24586 into 09-localhost Feb 20, 2023
@damiannolan damiannolan deleted the damian/disallow-multiple-localhost-connections branch February 20, 2023 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants