npm - @leofcoin/chain - Versions diffs - 1.7.126 → 1.7.127 - Mend

@leofcoin/chain 1.7.126 → 1.7.127

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/exports/browser/chain.js CHANGED Viewed

@@ -4876,11 +4876,17 @@ class State extends Contract {
         let block = await globalThis.peernet.get(hash, 'block');
         if (block !== undefined) {
             block = await new BlockMessage(block);
+            const computedHash = await block.hash();
+            if (computedHash !== hash) {
+                throw new ResolveError(`block hash mismatch for ${hash}`, {
+                    cause: new Error('hash does not match payload')
+                });
+            }
             const { index } = block.decoded;
-            if (this.#blocks[index] && this.#blocks[index].hash !== block.hash)
-                throw `invalid block ${hash} @${index}`;
-            if (!(await globalThis.peernet.has(hash)))
-                await globalThis.peernet.put(hash, block.encoded, 'block');
+            if (this.#blocks[index] && this.#blocks[index].hash !== computedHash)
+                throw new ResolveError(`invalid block ${computedHash} @${index}`);
+            if (!(await globalThis.peernet.has(computedHash)))
+                await globalThis.peernet.put(computedHash, block.encoded, 'block');
         }
         return block;
     }

package/exports/chain.js CHANGED Viewed

@@ -1003,11 +1003,17 @@ class State extends Contract {
         let block = await globalThis.peernet.get(hash, 'block');
         if (block !== undefined) {
             block = await new BlockMessage(block);
+            const computedHash = await block.hash();
+            if (computedHash !== hash) {
+                throw new ResolveError(`block hash mismatch for ${hash}`, {
+                    cause: new Error('hash does not match payload')
+                });
+            }
             const { index } = block.decoded;
-            if (this.#blocks[index] && this.#blocks[index].hash !== block.hash)
-                throw `invalid block ${hash} @${index}`;
-            if (!(await globalThis.peernet.has(hash)))
-                await globalThis.peernet.put(hash, block.encoded, 'block');
+            if (this.#blocks[index] && this.#blocks[index].hash !== computedHash)
+                throw new ResolveError(`invalid block ${computedHash} @${index}`);
+            if (!(await globalThis.peernet.has(computedHash)))
+                await globalThis.peernet.put(computedHash, block.encoded, 'block');
         }
         return block;
     }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@leofcoin/chain",
-  "version": "1.7.126",
+  "version": "1.7.127",
   "description": "Official javascript implementation",
   "private": false,
   "exports": {