electrum

commit 338adf05bad3f39b16d9e1d9f531c4e05b965756
parent 7294613447e9f2857630c4eeb6547c68aad365fc
Author: SomberNight <somber.night@protonmail.com>
Date:   Wed, 27 Jan 2021 20:14:55 +0100

interface.get_transaction: stricter sanitisation

in particular, Transaction.__init__ allows leading/trailing whitespaces

Diffstat:
M
electrum/interface.py
 | 
2
++

1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/electrum/interface.py b/electrum/interface.py
@@ -917,6 +917,8 @@ class Interface(Logger):
             raise Exception(f"{repr(tx_hash)} is not a txid")
         raw = await self.session.send_request('blockchain.transaction.get', [tx_hash], timeout=timeout)
         # validate response
+        if not is_hex_str(raw):
+            raise RequestCorrupted(f"received garbage (non-hex) as tx data (txid {tx_hash}): {raw!r}")
         tx = Transaction(raw)
         try:
             tx.deserialize()  # see if raises