Fixed duplicate share vulnerability with the nonce

zone117x fix
2014-09-30 18:55:39 +03:00 · 2014-09-30 18:55:39 +03:00 · 780b5255fa
parent cd36f84e2e
commit 780b5255fa
1 changed files with 4 additions and 0 deletions
--- a/lib/pool.js
+++ b/lib/pool.js
@ -518,7 +518,11 @@ function handleMinerMethod(method, params, ip, portData, sendReply, pushMessage)
                return;
            }

+	    params.nonce = params.nonce.substr(0, 8).toLowerCase();
+
            if (job.submissions.indexOf(params.nonce) !== -1){
+                var minerText = miner ? (' ' + miner.login + '@' + miner.ip) : '';
+                log('warn', logSystem, 'Duplicate share: ' + JSON.stringify(params) + ' from ' + minerText);
                sendReply('Duplicate share');
                return;
            }