rpc: restrict number of fake outs requested in restricted rpc mode

This commit is contained in:
moneromooo-monero 2016-06-29 20:43:14 +01:00
parent de91bb75a1
commit f11191a818
No known key found for this signature in database
GPG Key ID: 686F07454D6CEFC3

View File

@ -41,6 +41,8 @@ using namespace epee;
#include "crypto/hash.h"
#include "core_rpc_server_error_codes.h"
#define MAX_RESTRICTED_FAKE_OUTS_COUNT 40
namespace cryptonote
{
@ -189,6 +191,16 @@ namespace cryptonote
{
CHECK_CORE_BUSY();
res.status = "Failed";
if (m_restricted)
{
if (req.amounts.size() > 100 || req.outs_count > MAX_RESTRICTED_FAKE_OUTS_COUNT)
{
res.status = "Too many outs requested";
return true;
}
}
if(!m_core.get_random_outs_for_amounts(req, res))
{
return true;