highperfocused/lnd
1
0
Fork 0
mirror of https://github.com/lightningnetwork/lnd.git synced 2025-07-07 14:00:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

btcwallet: add transaction outputs bounds check to FetchInputInfo

Browse Source 
This prevents a panic when providing an incompatible output index for
the transaction.
This commit is contained in:
Wilmer Paulino
2020-05-20 11:42:12 -07:00
parent c2516d9352
commit f287ac3cea
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lnwallet/btcwallet/signer.go
View File

@ -37,6 +37,11 @@ func (b *BtcWallet) FetchInputInfo(prevOut *wire.OutPoint) (*lnwallet.Utxo, erro
// we actually have control of this output. We do this because the check // we actually have control of this output. We do this because the check
// above only guarantees that the transaction is somehow relevant to us, // above only guarantees that the transaction is somehow relevant to us,
// like in the event of us being the sender of the transaction. // like in the event of us being the sender of the transaction.
numOutputs := uint32(len(txDetail.TxRecord.MsgTx.TxOut))
if prevOut.Index >= numOutputs {
return nil, fmt.Errorf("invalid output index %v for "+
"transaction with %v outputs", prevOut.Index, numOutputs)
}
pkScript := txDetail.TxRecord.MsgTx.TxOut[prevOut.Index].PkScript pkScript := txDetail.TxRecord.MsgTx.TxOut[prevOut.Index].PkScript
if _, err := b.fetchOutputAddr(pkScript); err != nil { if _, err := b.fetchOutputAddr(pkScript); err != nil {
return nil, err return nil, err