Affected by GO-2025-3989 and 1 other vulnerabilities

GO-2025-3989: go-f3 Vulnerable to Cached Justification Verification Bypass in github.com/filecoin-project/go-f3

GO-2025-3990: go-f3 module vulnerable to integer overflow leading to panic in github.com/filecoin-project/go-f3

certchain

package

v0.8.2 Latest Latest Go to latest Published: Feb 24, 2025 License: Apache-2.0, MIT Imports: 12 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type CertChain struct {
	// contains filtered or unexported fields
}

func New(o ...Option) (*CertChain, error)

func (cc *CertChain) Generate(ctx context.Context, length uint64) ([]*certs.FinalityCertificate, error)

func (cc *CertChain) GetCommittee(instance uint64) (*gpbft.Committee, error)

func (cc *CertChain) GetProposal(instance uint64) (*gpbft.SupplementalData, *gpbft.ECChain, error)

func (cc *CertChain) Validate(ctx context.Context, crts []*certs.FinalityCertificate) error

type FinalityCertificateProvider func(context.Context, uint64) (*certs.FinalityCertificate, error)

type Option func(*options) error

func WithEC(ec ec.Backend) Option

func WithManifest(m *manifest.Manifest) Option

func WithSeed(seed int64) Option

func WithSignVerifier(sv SignVerifier) Option

type SignVerifier interface {
	gpbft.Signer
	gpbft.Verifier
	gpbft.SigningMarshaler
}