cosmos-sdk icon indicating copy to clipboard operation
cosmos-sdk copied to clipboard

chore: disable unordered txs when using amino

Open tac0turtle opened this issue 1 year ago • 5 comments

Description

Closes: #19291

prohibit amino signing usage with unordered txs


Author Checklist

All items are required. Please add a note to the item if the item is not applicable and please add links to any relevant follow up issues.

I have...

  • [ ] included the correct type prefix in the PR title
  • [ ] confirmed ! in the type prefix if API or client breaking change
  • [ ] targeted the correct branch (see PR Targeting)
  • [ ] provided a link to the relevant issue or specification
  • [ ] reviewed "Files changed" and left comments if necessary
  • [ ] included the necessary unit and integration tests
  • [ ] added a changelog entry to CHANGELOG.md
  • [ ] updated the relevant documentation or specification, including comments for documenting Go code
  • [ ] confirmed all CI checks have passed

Reviewers Checklist

All items are required. Please add a note if the item is not applicable and please add your handle next to the items reviewed if you only reviewed selected items.

I have...

  • [ ] confirmed the correct type prefix in the PR title
  • [ ] confirmed all author checklist items have been addressed
  • [ ] reviewed state machine logic, API design and naming, documentation is accurate, tests and test coverage

Summary by CodeRabbit

  • Refactor
    • Enhanced transaction validation logic for improved security and efficiency.

tac0turtle avatar Mar 08 '24 13:03 tac0turtle

Walkthrough

The recent changes focus on enhancing the transaction handling within the Cosmos SDK, specifically targeting unordered transactions. A crucial update includes the removal of amino support for unordered transactions to address limitations with amino signing. This is accomplished through updates in validation logic and ensuring transactions are hashed correctly, excluding AuthInfo. These adjustments aim to improve the security and efficiency of transaction processing.

Changes

Files Change Summary
x/auth/ante/unordered.go Added a comment to indicate hashing transaction bytes without AuthInfo in UnorderedTxDecorator.
x/tx/decode/decode.go Introduced rejectAminoUnorderedTx function to enhance validation logic in the Decode method.

Assessment against linked issues

Objective Addressed Explanation
Remove amino support in unordered txs (#19291)

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share

Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit-tests for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit tests for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit tests.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger a review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • The JSON schema for the configuration file is available here.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/coderabbit-overrides.v2.json

CodeRabbit Discord Community

Join our Discord Community to get help, request features, and share feedback.

coderabbitai[bot] avatar Mar 08 '24 13:03 coderabbitai[bot]

LGTM, shall we backport to 0.50?

Never mind, seems not implemented in 0.50

yihuang avatar Mar 09 '24 11:03 yihuang

This is good for another round of reviews after our latest discussions!

alexanderbez avatar Mar 18 '24 19:03 alexanderbez

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar Apr 18 '24 00:04 github-actions[bot]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar May 19 '24 00:05 github-actions[bot]

@julienrbrt thoughts in merging this?

tac0turtle avatar May 20 '24 07:05 tac0turtle

@julienrbrt thoughts in merging this?

Given we want to use all x/tx in v0.50, we need to make sure we can use /api from main in v0.50 before hand. Ref: https://github.com/cosmos/cosmos-sdk/pull/19700#discussion_r1518613573 Otherwise from that point we'll need a compatibility matrix for x/tx

julienrbrt avatar May 20 '24 22:05 julienrbrt

we can do this a different way and avoid the changes in x/tx

tac0turtle avatar May 27 '24 10:05 tac0turtle