Merge #3310

3310: [private chain] Backport 1.4.8 fixes and support for CA signed client certificates  r=mpapierski a=mpapierski

This PR contains updates `feat-private-chain` for a new private chain release independent of 1.5.0:

- Merge of v1.4.8 security release
- Backport of #3291

After this PR is merged, it should be possible to release `private-1.4.8`.

Co-authored-by: Michał Papierski <[email protected]>
Co-authored-by: Joe Sacher <[email protected]>
Co-authored-by: Fraser Hutchison <[email protected]>
Co-authored-by: casperlabs-bors-ng[bot] <82463608+casperlabs-bors-ng[bot]@users.noreply.github.com>

Author: 4 people

Cargo.lock

@@ -11,6 +11,13 @@ All notable changes to this project will be documented in this file.  The format
 
 
 
+## 2.0.1
+
+### Security
+* Implement checks before preprocessing Wasm to avoid potential OOM when initializing table section.
+* Implement checks before preprocessing Wasm to avoid references to undeclared functions or globals.
+
+
 ## 2.0.0
 
 ### Changed

execution_engine/CHANGELOG.md

@@ -1,6 +1,6 @@
 [package]
 name = "casper-execution-engine"
-version = "2.0.0" # when updating, also update 'html_root_url' in lib.rs
+version = "2.0.1" # when updating, also update 'html_root_url' in lib.rs
 authors = ["Henry Till <[email protected]>", "Ed Hastings <[email protected]>"]
 edition = "2018"
 description = "CasperLabs execution engine crates."

execution_engine/Cargo.toml

@@ -19,7 +19,7 @@ use crate::{
 
 /// A target mode indicates if a native transfer's arguments will resolve to an existing purse, or
 /// will have to create a new account first.
-#[derive(Copy, Clone, Debug, PartialEq)]
+#[derive(Copy, Clone, Debug, PartialEq, Eq)]
 pub enum TransferTargetMode {
     /// Unknown target mode.
     Unknown,
@@ -117,7 +117,7 @@ impl TryFrom<TransferArgs> for RuntimeArgs {
 ///
 /// Purpose of this builder is to resolve native tranfer args into [`TransferTargetMode`] and a
 /// [`TransferArgs`] instance to execute actual token transfer on the mint contract.
-#[derive(Clone, Debug, PartialEq)]
+#[derive(Clone, Debug, PartialEq, Eq)]
 pub struct TransferRuntimeArgsBuilder {
     inner: RuntimeArgs,
 }

execution_engine/src/core/engine_state/transfer.rs

@@ -1,6 +1,6 @@
 //! The engine which executes smart contracts on the Casper network.
 
-#![doc(html_root_url = "https://docs.rs/casper-execution-engine/2.0.0")]
+#![doc(html_root_url = "https://docs.rs/casper-execution-engine/2.0.1")]
 #![doc(
     html_favicon_url = "https://raw.githubusercontent.com/CasperLabs/casper-node/master/images/CasperLabs_Logo_Favicon_RGB_50px.png",
     html_logo_url = "https://raw.githubusercontent.com/CasperLabs/casper-node/master/images/CasperLabs_Logo_Symbol_RGB.png",

execution_engine/src/lib.rs

@@ -7,7 +7,7 @@ use uuid::Uuid;
 
 /// A correlation id is a unique identifier which can be used to track the progress of a given
 /// execution engine operation.
-#[derive(Clone, Copy, Debug, Default, Hash, PartialEq, Serialize)]
+#[derive(Clone, Copy, Debug, Default, Hash, PartialEq, Eq, Serialize)]
 pub struct CorrelationId(Uuid);
 
 impl CorrelationId {