Skip to content

type_id script resume may randomly failed

High
doitian published GHSA-mcmr-49x3-4jqm Nov 2, 2022

Package

No package listed

Affected versions

v0.100.0...v0.101.2

Patched versions

v0.102.0

Description

Impact

https://github.com/nervosnetwork/ckb/blob/v0.101.2/script/src/verify.rs#L871-L879
TypeIdSystemScript resume handle is not correct when max_cycles is not enough, ScriptError::ExceededMaximumCycles will be raised directly ranther than suspend as expect, and also because script_group execution order is random, so this will happen randomly.

Severity

High

CVE ID

No known CVE

Weaknesses

No CWEs