go-spacemesh
go-spacemesh copied to clipboard
Check for accumulative data/messages in the hare protocol
Should make sure no one can DDOS us by spamming in the hare protocol
Preround scenario: malicious sends multiple preround msgs with different set causing the honest participant to store the union of all msgs
See comments on #3287 for network security.
However this will need further safeguards for accumulation of data in memory that either doesn't get put into a message or is spread over many incoming messages. See #1052 for an example of the latter.
More examples: https://github.com/spacemeshos/go-spacemesh/issues/1038 https://github.com/spacemeshos/go-spacemesh/issues/563