mirror of
https://github.com/lightning/bolts.git
synced 2024-11-19 01:50:03 +01:00
Prevent preimage reveal collision while claiming onchain incoming HTLC (#808)
See CVE-2020-26896 for context.
This commit is contained in:
parent
5a86adaa77
commit
dcf6b0f359
@ -314,6 +314,7 @@ A local node:
|
||||
outgoing HTLC:
|
||||
- MUST *resolve* the output by spending it, using the HTLC-success
|
||||
transaction.
|
||||
- MUST NOT reveal its own preimage when it's not the final recipient.<sup>[Preimage-Extraction](https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002857.html)</sup>
|
||||
- MUST resolve the output of that HTLC-success transaction.
|
||||
- otherwise:
|
||||
- if the *remote node* is NOT irrevocably committed to the HTLC:
|
||||
|
Loading…
Reference in New Issue
Block a user