Close Menu


    Ethereum

    Security alarm – [Previous security patch can lead to invalid state root on Go clients with a specific transaction sequence – Fixed. Please update.]

    msmarkBy No Comments1 Min Read

    summary: An execution error in the go client may result in an invalid state

    Affected client versions: Latest (unpatched) versions of the Go client; Version 1.1.2 and version 1.0.4 flags and development of major branches before September 9th.

    Probability: Low

    Intensity: high

    Effect: High

    details: The Go ethereum client does not properly restore the state of the execution environment when a transaction runs out if – within the same block – the contract has been terminated. This may result in an invalid copy operation of the state object; Mark the nodes as It has not been deleted. This process may cause a consensus issue among other applications.

    Effects on the expected depth of chain reorganization: no one

    Remedial action taken by Ethereum: Provide hotfixes as follows.

    Proposed temporary solution: Use a Python or C++ client

    If using PPA: sudo apt-get-update then sudo apt-get-promotion

    If using syrup: Update the drink then Drink reinstall ethereum

    If using Windows binary: Download the updated binary file from https://github.com/ethereum/go-ethereum/releases/tag/v1.1.3

    Main branch commitment: https://github.com/ethereum/go-ethereum/commit/9ebe787d3afe35902a639bf7c1fd68d1e591622a

    If you are building from source: git fetch origin && git checkout origin/master followed by Make a geth

    Share.

    Related Posts