Affected by GO-2025-3989 and 1 other vulnerabilities

GO-2025-3989: go-f3 Vulnerable to Cached Justification Verification Bypass in github.com/filecoin-project/go-f3

GO-2025-3990: go-f3 module vulnerable to integer overflow leading to panic in github.com/filecoin-project/go-f3

certchain

package

v0.8.5 Latest Latest Go to latest Published: Jun 12, 2025 License: Apache-2.0, MIT Imports: 13 Imported by: 0

Details

certchain package is a testing utility for generating and validating finality certificates. It has no effect on the consensus protocol.

This section is empty.

This section is empty.

This section is empty.

type CertChain struct {
	// contains filtered or unexported fields
}

func New(o ...Option) (*CertChain, error)

func (cc *CertChain) Generate(ctx context.Context, length uint64) ([]*certs.FinalityCertificate, error)

func (cc *CertChain) GetCommittee(ctx context.Context, instance uint64) (*gpbft.Committee, error)

func (cc *CertChain) GetProposal(ctx context.Context, instance uint64) (*gpbft.SupplementalData, *gpbft.ECChain, error)

func (cc *CertChain) Validate(ctx context.Context, crts []*certs.FinalityCertificate) error

type FinalityCertificateProvider func(context.Context, uint64) (*certs.FinalityCertificate, error)

type Option func(*options) error

func WithEC(ec ec.Backend) Option

func WithManifest(m manifest.Manifest) Option

func WithSeed(seed int64) Option

func WithSignVerifier(sv SignVerifier) Option

type SignVerifier interface {
	gpbft.Signer
	gpbft.Verifier
}