You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This is not a security-related bug/issue. If it is, please follow please follow the security policy.
This is not a question or a support request. If you have any lotus related questions, please ask in the venus forum.
This is not a new feature request. If it is, please file a feature request instead.
This is not an enhancement request. If it is, please file a improvement suggestion instead.
I have searched on the issue tracker and the venus forum, and there is no existing related issue or discussion.
I am running the latest release, or the most recent RC(release canadiate) for the upcoming release or the dev branch(master), or have an issue updating to any of these.
P1High - we should be working on this now or in the immediate futuredesignVenus feature/system design issuesV-venus-marketvenus-market component
2 participants
Converted from issue
This discussion was converted from issue #4946 on June 20, 2022 06:51.
Heading
Bold
Italic
Quote
Code
Link
Numbered list
Unordered list
Task list
Attach files
Mention
Reference
Menu
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Checklist
latest release
, or the most recent RC(release canadiate) for the upcoming release or the dev branch(master), or have an issue updating to any of these.Venus component
Venus Version
Describe the Bug
venus-market中存在两个问题
现在会从venus-auth拿出账号矿工, 建立一个addr-account的表,当需要签名是通过from查询地址属于哪个account,在通过gateway去找用户签名。
但是如果这个矿工被移除,在这个cache表中移除对应的地址将会十分困难。另外一个问题是,如果两个account使用相同的地址,这里会存在后来的addr-account覆盖前面的情况,签名转发会不正确。
在目前market的部分功能,例如publish订单,paychannel会进行对相同地址的一些信息进行聚合,在进行签名的时候就无法区分是否是数据是来源于哪个account。签名转发自然也就不正确了。
解决办法:在account级别上隔离market里面的各种信息,在account级别上进行资产的聚合支付,这样在寻求消息签名时自然可以知道该到哪个account上去寻求签名。这样也就不需要addr-account缓存的存在了。
影响部分:
Logging Information
Repo Steps
No response
Beta Was this translation helpful? Give feedback.
All reactions