Skip to content

Instantly share code, notes, and snippets.

@webmaster128
Last active November 10, 2021 00:41
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save webmaster128/99f48b6e1de51453935a6f32da4ad3ee to your computer and use it in GitHub Desktop.
Save webmaster128/99f48b6e1de51453935a6f32da4ad3ee to your computer and use it in GitHub Desktop.
CosmWasm patch to be released on Wednesday, November 10th

A bug in wasmvm has been discovered.

Bug

This bug

  1. can potentially crash the node,
  2. can potentially cause consensus failures.

No code path is known to the author that can cause 1 or 2, but this does not guarantee such paths do not exist. If there exists a way to abuse the bug, it is non-trivial to find.

Patch

Both 0.16 and 1.0 are equally affected. Both versions will receive a patch. Some older versions are probably affected as well but will not receive an update.

The patch is potentially consensus breaking. However, no code path is known to the author in which the patch breaks consensus.

The release is scheduled for Wednesday, November 10th at 10am Berlin time. An update is recommended for all users.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment