Emmanuel T Odeke

For better security and to flush out security bugs. /cc @elias-orijtech

test: x/tx/signing/aminojson: fuzz SignModeHandler.GetSignBytes

1

For improved security and quality assurance in preparation for a new release, this change fuzzes the described route. /cc @elias-orijtech

test: x/tx/decode: add fuzzers for Decode + rejectNonADR027TxRaw

3

This change adds fuzzers for (*Decoder).Decode as well as rejectNonADR027TxRaw. Adds more hints to finding crashers by mutating a tx using an inline struct mutator from github.com/google/gofuzz which indeed adds...

Updates #15777 /cc @elias-orijtech

## Summary of Bug We need to ensure we have fuzzers for all the .Parse methods for the various renderers ## Checklist - [x] IntValueRenderer per https://github.com/cosmos/cosmos-sdk/pull/15730 - [ ]...

perf: x/genutil/types: AppGenesisFromFile and AppGenesisFromReader are unnecessarily inefficient by fully slurping the io.Reader to RAM then invoking json.Unmarshal then attempting on error to invoke cometbft/cmtjson.Unmarshal

3

### Is there an existing issue for this? - [X] I have searched the existing issues ### What happened? While auditing cometbft to evaluate how we can use an incremental...

Added go.mo and ran `go mod tidy`

all: use SHA256 with SIMD instructions for higher performance and throughout

14

In this repository, we heavily use the Go standard library's crypto/sha256. However there exists a Single Instruction Multiple Data (SIMD) package from our friends at Minio per https://github.com/minio/sha256-simd and it...

iavl: *MutableTree doesn't provide a way to release the database; noticed inside iavl/cmd/iaviewer.ReadTree

1

Noticed while I was working on some potential improvements for iavl/cmd/iaviewer that ReadTree whose code looks like this https://github.com/cosmos/iavl/blob/172c349827b861c8d0fc3b5b54404fcb989fe67a/cmd/iaviewer/main.go#L120-L136 returns *iavl.Mutable https://pkg.go.dev/github.com/cosmos/iavl#MutableTree which doesn't have a way to close the...

This code https://github.com/cosmos/iavl/blob/d0241db89d211a17e9dbd249587cba257d36a4f9/keyformat/key_format.go#L69-L70 assumes that .layout will always have a length > 0. I found this issue by code auditing but also by fuzzing ```go package keyformat import ( "encoding/json"...