Skip to content

Pallets: Validation of input parameters #915

Description

@sameh-farouk

Describe the bug

Many calls in pallets do not sufficiently check the validity of the input parameters, which can lead to DoS of the system for some time.

Recently, due to provide invalid data as parameters to one of tfgrid pallet public calls, our subsquid indexer got jammed, which disrupted graphql and consequently made gridproxy report all nodes as offline, which impacted all the dependent services.

An audit is needed to identify and fix any similar vulnerabilities in our runtime calls.

For more Context:
threefoldtech/ledger_graphql#143
https://github.com/threefoldtech/tf_operations/issues/2086

Metadata

Metadata

Assignees

No one assigned

    Labels

    type_bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions