blockverify

func Hash ¶

func Hash(
	blockType uint,
	wantSlot uint64,
	cborData []byte,
	wantHash []byte,
) (gledger.Block, error)

Hash decodes cborData as a block of blockType and verifies that it hashes to wantHash and was produced at wantSlot, returning the decoded block on success. blockType is a decode hint, but is not trusted on its own: a wrong type usually either fails to decode (ErrUndecodable) or yields a different hash (ErrHashMismatch).

Decoding goes through models.Block.Decode rather than calling gledger.NewBlockFromCbor directly, so a Conway-tagged block carrying the Musashi/Leios prototype's extended header (see DecodeConwayBlock) is accepted the same way the rest of the storage stack already accepts it, instead of this check alone rejecting it as undecodable.

Hash does not independently re-derive blockType from the decoded header. An earlier version of this check did, via gledger.DetermineBlockType, to catch the case where, for Shelley and later, the block hash covers only the header, and adjacent eras share that header's layout, so the same bytes can decode -- with an identical hash and slot -- under more than one era. That check was dropped because DetermineBlockType classifies era from the header's announced protocol-major version, which is a block producer's hard-fork-readiness signal, not a record of which era the bytes are actually encoded in: a producer starts announcing the next era's protocol major before that era's own hard fork has triggered, so a genuine, correctly-encoded block in the current era can carry a protocol major outside the range DetermineBlockType expects for it. That made the check reject real mainnet blocks at every hard-fork boundary -- observed concretely in this repository's own immutable-chain testdata, where genuine Alonzo blocks (Shelley-shaped headers) carry protocol major 7 (Babbage's own floor) -- a functional regression on the primary production GetBlock path, worse than the narrow mislabeling gap it closed. The gap is accepted rather than worked around further: hash and slot together already prove the returned bytes are the genuine, uncorrupted content for the requested key; what an accepted era disagreement could still leave open is BlockMetadata.Type naming an adjacent era that happens to share the same header layout, which a caller that decodes strictly under the recorded Type (rather than re-deriving it) would not be misled by.

For a Byron main block, the default Gouroboros decoder validates the full body proof, including the ssc_proof hash. Byron's block hash covers only the header, so validating the body proof prevents a remote store from substituting payload bytes while preserving the requested block hash.