Joost Jager 43bad4af9f

invoices: always check htlc amt with invoice amount ...

Previously a check was made for accepted and settled invoices against
the paid amount. This opens up a probe vector where an attacker can pay
to an invoice with an amt that is higher than the invoice amount and
find out if the invoice is already paid or not.

2019-09-04 19:20:07 +02:00

..

invoiceregistry_test.go

invoices: always check htlc amt with invoice amount

2019-09-04 19:20:07 +02:00

invoiceregistry.go

invoices: always check htlc amt with invoice amount

2019-09-04 19:20:07 +02:00

log.go

invoices: create package

2019-01-07 23:04:05 +01:00

utils_test.go

htlcswitch: hodl invoice

2019-03-15 10:09:17 +01:00