@leofcoin/workers 1.5.41 → 1.5.43

package/exports/browser/machine-worker.js

@@ -1738,11 +1738,25 @@ const _ = {
     addLoadedBlock: (block) => {
         const size = formatBytes(block.length);
         block = JSON.parse(block, jsonParseBigInt);
-        // if (block.decoded) block = { ...block.decoded, hash: await new BlockMessage(block).hash() }
-        // if (blocks[block.index - 1]) {
-        //   console.warn(`block ${block.index} already loaded, skipping`)
-        //   return false
-        // }
+        const index = Number(block.index);
+        const tipIndex = Number(lastBlock.index);
+        if (!['number', 'bigint'].includes(typeof block.index) ||
+            !Number.isSafeInteger(index) || index < 0 || typeof block.hash !== 'string' || !block.hash) {
+            throw new Error('Invalid loaded block identity');
+        }
+        if (lastBlock.hash !== '0x0') {
+            if (index < tipIndex)
+                return false;
+            if (index === tipIndex) {
+                if (block.hash === lastBlock.hash)
+                    return false;
+                throw new Error(`Loaded block conflict at index ${index}`);
+            }
+        }
+        const expectedIndex = lastBlock.hash === '0x0' ? 0 : tipIndex + 1;
+        if (index !== expectedIndex || block.previousHash !== lastBlock.hash) {
+            throw new Error(`Loaded block does not extend canonical tip at index ${index}`);
+        }
         blocks[block.index.toString()] = block;
         lastBlock = blocks[blocks.length - 1];
         totalBlocks += 1n;

package/exports/machine-worker.js

@@ -1738,11 +1738,25 @@ const _ = {
     addLoadedBlock: (block) => {
         const size = formatBytes(block.length);
         block = JSON.parse(block, jsonParseBigInt);
-        // if (block.decoded) block = { ...block.decoded, hash: await new BlockMessage(block).hash() }
-        // if (blocks[block.index - 1]) {
-        //   console.warn(`block ${block.index} already loaded, skipping`)
-        //   return false
-        // }
+        const index = Number(block.index);
+        const tipIndex = Number(lastBlock.index);
+        if (!['number', 'bigint'].includes(typeof block.index) ||
+            !Number.isSafeInteger(index) || index < 0 || typeof block.hash !== 'string' || !block.hash) {
+            throw new Error('Invalid loaded block identity');
+        }
+        if (lastBlock.hash !== '0x0') {
+            if (index < tipIndex)
+                return false;
+            if (index === tipIndex) {
+                if (block.hash === lastBlock.hash)
+                    return false;
+                throw new Error(`Loaded block conflict at index ${index}`);
+            }
+        }
+        const expectedIndex = lastBlock.hash === '0x0' ? 0 : tipIndex + 1;
+        if (index !== expectedIndex || block.previousHash !== lastBlock.hash) {
+            throw new Error(`Loaded block does not extend canonical tip at index ${index}`);
+        }
         blocks[block.index.toString()] = block;
         lastBlock = blocks[blocks.length - 1];
         totalBlocks += 1n;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leofcoin/workers",
-  "version": "1.5.41",
+  "version": "1.5.43",
   "description": "Workers used in @leofcoin/chain",
   "type": "module",
   "private": false,
@@ -38,7 +38,7 @@
     "@noble/hashes": "^2.4.0",
     "acorn": "^8.19.0",
     "@leofcoin/addresses": "^1.0.64",
-    "@leofcoin/lib": "^1.3.13",
+    "@leofcoin/lib": "^1.3.16",
     "@leofcoin/messages": "^1.6.5",
     "@leofcoin/storage": "^3.5.38",
     "@leofcoin/utils": "^1.1.45",