Git-Mirrors/monero
1
0
Fork 0
mirror of https://github.com/monero-project/monero.git synced 2024-12-16 07:44:20 -05:00
Code Issues Packages Projects Releases Wiki Activity
9,053 Commits 9 Branches 69 Tags 295 MiB
411f1b0ee3
Commit Graph

9053 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
moneromooo-monero
fd35e2304a
wallet: fix another facet of "did I get some monero" information leak 
We get new pool txes before processing any tx, pool or not.
This ensures that if we're asked for a password, this does not
cause a measurable delay in the txpool query after the last
block query.
 2019-11-01 18:59:38 +00:00
moneromooo-monero
d5472bd87b
wallet2: do not send an unnecessary last getblocks.bin call on refresh 
The "everything refreshed" state was detected when a refresh call did
not return any new blocks. This can be detected without that extra
"empty" call by comparing the claimed node height to the height of
the last block retrieved. Doing this avoids that last call, saves
some bandwidth, and makes the common refresh case use only one call
rather than two.

As a side effect, it prevents an information leak reported by
Tramèr et al: if the wallet retrieves a set of blocks which includes
an output sent to the refreshing wallet, the wallet will prompt the
user for the password to decode the amount and calculate the key
image for the new output, and this will delay subsequent calls to
getblocks.bin, allowing a passive adversary to note the delay and
deduce when the wallet receives at least one output.

This can still happen if the wallet downloads more than 1000 blocks,
since this will be split in several calls, but then the most the
adversary can tell is which 1000 block section the user received
some monero (the adversary can estimate the heights of the blocks
by calculating how many "large" transfers are done, which will be
sections of blocks, the last of which will usually be below 1000,
but the size of the data should allow the actual number of blocks
sent to be determined fairly accurately).

This timing trick still be used via the subsequent scan for incoming
txes in the txpool, which will be fixed later.
 2019-11-01 18:59:37 +00:00
Riccardo Spagni
d8d5749b46
Merge pull request #6067 
5ae029881 unit_tests: fix use after free (moneromooo-monero)
 2019-11-01 17:05:13 +02:00
Riccardo Spagni
8cc7d5b6c0
Merge pull request #6066 
d31024c2e cryptonote: untangle dependency from miner to blockchain (moneromooo-monero)
 2019-11-01 17:03:58 +02:00
Riccardo Spagni
d4b5ba88df
Merge pull request #6064 
0e3b823a1 daemon: always use bootstrap daemon (if set) in '--no-sync' mode (xiphon)
 2019-11-01 17:03:44 +02:00
Riccardo Spagni
646a7a2800
Merge pull request #6062 
508dcfada RandomX: Update to v1.1.6 (tevador)
 2019-11-01 17:03:22 +02:00
Riccardo Spagni
78e59f531e
Merge pull request #6059 
45b6b6038 Updating gitian yml files for v0.15 (Jonathan Cross)
 2019-11-01 16:59:20 +02:00
Riccardo Spagni
5068793036
Merge pull request #6059 
45b6b6038 Updating gitian yml files for v0.15 (Jonathan Cross)
 2019-11-01 16:53:11 +02:00
moneromooo-monero
97ae7bb5cb
wallet2: do not repeatedly ask for pool txes sent to us 
This lets a passive attacker with access to the network link
between node and wallet perform traffic analysis to deduce
when an idle wallet receives a transaction.

Reported by Tramèr et al.
 2019-11-01 10:42:01 +00:00
Gingeropolous
fb9b741bf0
README update upgrade table 
with details for nov 30th network upgrade
 2019-10-31 15:44:55 -04:00
Gingeropolous
f89ea437d0
README update upgrade table with details 
of the november 30th fork
 2019-10-31 15:43:05 -04:00
Jonathan Cross
45b6b60385
Updating gitian yml files for v0.15 2019-10-31 17:36:47 +01:00
moneromooo-monero
5ae0298818
unit_tests: fix use after free 2019-10-31 12:03:22 +00:00
moneromooo-monero
d31024c2e1
cryptonote: untangle dependency from miner to blockchain 
It causes link errors at least on mac
 2019-10-31 01:25:07 +00:00
moneromooo-monero
ebc6ce44f4
cryptonote: untangle dependency from miner to blockchain 
It causes link errors at least on mac
 2019-10-31 01:06:42 +00:00
xiphon
0e3b823a15 daemon: always use bootstrap daemon (if set) in '--no-sync' mode 2019-10-30 19:45:23 +00:00
tevador
2efc6acdb2 RandomX: Update to v1.1.6 2019-10-30 20:25:10 +01:00
tevador
508dcfadac RandomX: Update to v1.1.6 2019-10-30 20:23:45 +01:00
moneromooo-monero
1554a7768b
unit_tests: fix use after free 2019-10-30 18:40:20 +00:00
xiphon
2e2bf8a207 daemon: always use bootstrap daemon (if set) in '--no-sync' mode 2019-10-28 21:52:19 +00:00
luigi1111
4c9fd8d86d
Merge pull request #6044 
eb16755 blockchain: fix unwanted error when probing the pool for a tx (moneromooo-monero)
 2019-10-27 16:28:33 -05:00
luigi1111
f9ddda75a2
Merge pull request #6038 
e8964c2 wallet: do not warn if the rpc cost was free (moneromooo-monero)
 2019-10-27 16:27:31 -05:00
luigi1111
bb04201505
Merge pull request #6045 
86ac20f blockchain: fix unwanted error when probing the pool for a tx (moneromooo-monero)
 2019-10-27 16:26:25 -05:00
luigi1111
e59639addc
Merge pull request #6039 
8ff9e6b wallet: do not warn if the rpc cost was free (moneromooo-monero)
 2019-10-27 16:25:03 -05:00
moneromooo-monero
86ac20f64e
blockchain: fix unwanted error when probing the pool for a tx 2019-10-27 19:23:36 +00:00
moneromooo-monero
eb16755083
blockchain: fix unwanted error when probing the pool for a tx 2019-10-27 19:23:25 +00:00
moneromooo-monero
8ff9e6bc32
wallet: do not warn if the rpc cost was free 2019-10-27 11:12:14 +00:00
moneromooo-monero
e8964c26cc
wallet: do not warn if the rpc cost was free 2019-10-27 10:59:31 +00:00
luigi1111
b928ead30e
Merge pull request #6036 
7bca3e0 CMake build out of source (trasherdk)
 2019-10-26 12:23:28 -05:00
TrasherDK
7bca3e069f CMake build out of source 2019-10-26 15:10:23 +02:00
luigi1111
3b0a43a8d4
Merge pull request #6033 
da2ffd6 python-rpc: add missing daemon RPC (moneromooo-monero)
 2019-10-25 20:51:04 -05:00
luigi1111
ef8b3a15b4
Merge pull request #6017 
5734686 rpc: Include tag in get_info version string (ndorf)
 2019-10-25 20:48:04 -05:00
luigi1111
bae2d00ec4
Merge pull request #6025 
aceb1dc Translations from weblate + resync (Monero-Weblate)
 2019-10-25 20:46:38 -05:00
luigi1111
b408416e7e
Merge pull request #6034 
f7f7513 rpc: fix PRIx64 build error on some systems (moneromooo-monero)
 2019-10-25 20:45:27 -05:00
luigi1111
0aec2613f2
Merge pull request #6032 
978a61f functional_tests: fix rpc_payment tests with python 3 (moneromooo-monero)
 2019-10-25 20:43:27 -05:00
moneromooo-monero
f7f7513ec3
rpc: fix PRIx64 build error on some systems 2019-10-26 00:05:21 +00:00
moneromooo-monero
978a61f34f
functional_tests: fix rpc_payment tests with python 3 2019-10-25 23:20:33 +00:00
moneromooo-monero
da2ffd6abe
python-rpc: add missing daemon RPC 2019-10-25 23:10:35 +00:00
luigi1111
7caa2b0d3e
Merge pull request #6024 
296ec7c device: bounds checking in Ledger send_secret/receive_secret (xiphon)
 2019-10-25 16:06:37 -05:00
luigi1111
07c6789148
Merge pull request #5958 
d25acd7 Add hmac over encrypted value during transaction (clashm)
34f28a7 Add display address (clashm)
235b94e Revert PR #5835 (export view key) (clashm)
32febd2 Fix debug feature (clashm)
 2019-10-25 16:03:24 -05:00
luigi1111
0a4920414f
Merge pull request #6031 
27cb8bc revert changes to translations (moneromooo-monero)
 2019-10-25 14:40:28 -05:00
moneromooo-monero
27cb8bc509
revert changes to translations 
Those should be updated from the Weblate tool only
 2019-10-25 19:32:07 +00:00
luigi1111
86d085e988
Merge pull request #6028 
174a6ac tx_pool: fix divide by 0 in log (moneromooo-monero)
 2019-10-25 14:29:15 -05:00
luigi1111
f253bf3846
Merge pull request #6007 
a4dc575 rpc: add a flush_cache RPC (moneromooo-monero)
 2019-10-25 14:20:20 -05:00
luigi1111
9a995f338a
Merge pull request #6023 
643dcb9 net: link with libzmq (moneromooo-monero)
 2019-10-25 13:56:06 -05:00
luigi1111
bae49e9fbd
Merge pull request #6022 
dd28383 depends: bump cppzmq version to 4.4.1 (anonimal)
157b3fc depends: bump zeromq version to 4.1.7 (anonimal)
 2019-10-25 13:54:15 -05:00
luigi1111
68b03abdc5
Merge pull request #6021 
65e8a89 Change monerod --proxy to --tx-proxy (vtnerd)
 2019-10-25 13:52:19 -05:00
luigi1111
4e2b139e72
Merge pull request #6020 
3816ac2 build: fix building on Windows due to _FORTIFY_SOURCE changes in MSYS2 (iDunk5400)
78b076c Windows: enable high-entropy ASLR where available (iDunk5400)
 2019-10-25 13:48:25 -05:00
luigi1111
4a67bdbde4
Merge pull request #6019 
d60c1b6 changed 'batttery' to 'battery' (jakehemmerle)
 2019-10-25 13:45:59 -05:00
luigi1111
711625c467
Merge pull request #6014 
93e7426 wallet2: error out when we need a daemon password but have no prompt function (moneromooo-monero)
 2019-10-25 13:44:31 -05:00