Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ton-blockchain/ton
master @ 6308c96
92
Fixes
0
CVEs
CRITICAL
Peak severity
33.3%
Coverage
Highlights
Denial of Service: 72 prior fixes. Scrutinize any change in this area.
validator/impl/collator.cpp: most-fixed (6 issues). Treat as high-risk during review.
59 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: The consensus collation loop is prone to resource and CPU exhaustion if it continues to import external messages when queues are full, or fails to enforce early timeouts on malformed transactions, which previously led to validator halts. Strict queue bounds and block size configuration checks are necessary.
Denial of Service: The TVM deserialization process, specifically involving Bag of Cells (BoC) and stack elements, has historically suffered from infinite loops, recursion depth exhaustion, and unhandled negative sizes that crash the node. Ensuring strict serialization bounds and status return propagation is critical.
Denial of Service: Unbounded network interfaces in the Abstract Decentralized Network Library (ADNL) allow remote attackers to cause out-of-memory errors or crash the node via message queue overflow, uncleaned rate-limiter maps, or unvalidated public key initializations. Robust input filtering and structured cleanup routines are required.