diff options
| author | jeffro256 <jeffro256@tutanota.com> | 2023-10-23 16:28:02 -0500 |
|---|---|---|
| committer | jeffro256 <jeffro256@tutanota.com> | 2023-10-23 16:28:02 -0500 |
| commit | 05231400cebfeedbbc0a5386f38a033bba6314b3 (patch) | |
| tree | d49c54e6f5e1de050d603b3ed72389c9bc417dcd /src | |
| parent | Merge pull request #9013 (diff) | |
| download | monero-05231400cebfeedbbc0a5386f38a033bba6314b3.tar.xz | |
ringct: make `rctSigBase` serialization follow strict aliasing rule
Accessing an object of type `char` thru an lvalue of type `crypto::hash8` is undefined behavior.
https://developers.redhat.com/blog/2020/06/03/the-joys-and-perils-of-aliasing-in-c-and-c-part-2
Diffstat (limited to 'src')
| -rw-r--r-- | src/ringct/rctTypes.h | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/src/ringct/rctTypes.h b/src/ringct/rctTypes.h index 380ca2f53..b657737fe 100644 --- a/src/ringct/rctTypes.h +++ b/src/ringct/rctTypes.h @@ -362,11 +362,17 @@ namespace rct { { if (type == RCTTypeBulletproof2 || type == RCTTypeCLSAG || type == RCTTypeBulletproofPlus) { + // Since RCTTypeBulletproof2 enote types, we don't serialize the blinding factor, and only serialize the + // first 8 bytes of ecdhInfo[i].amount ar.begin_object(); - if (!typename Archive<W>::is_saving()) + crypto::hash8 trunc_amount; // placeholder variable needed to maintain "strict aliasing" + if (!typename Archive<W>::is_saving()) // loading memset(ecdhInfo[i].amount.bytes, 0, sizeof(ecdhInfo[i].amount.bytes)); - crypto::hash8 &amount = (crypto::hash8&)ecdhInfo[i].amount; - FIELD(amount); + else // saving + memcpy(trunc_amount.data, ecdhInfo[i].amount.bytes, sizeof(trunc_amount)); + FIELD(trunc_amount); + if (!typename Archive<W>::is_saving()) // loading + memcpy(ecdhInfo[i].amount.bytes, trunc_amount.data, sizeof(trunc_amount)); ar.end_object(); } else |