sikkienl/dash
1
0
Fork 0
mirror of https://github.com/dashpay/dash.git synced 2024-12-27 21:12:48 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Return early in IsBanned.

Browse Source 
I am not aware of any reason that we'd try to stop a ban-list timing
 side-channel and the prior code wouldn't be enough if we were.
This commit is contained in:
Gregory Maxwell 2017-06-09 02:05:53 +00:00
parent 29f80cd230
commit bf376eaccc
1 changed files with 14 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/net.cpp
View File

@ -468,8 +468,6 @@ void CConnman::ClearBanned()
} }
bool CConnman::IsBanned(CNetAddr ip) bool CConnman::IsBanned(CNetAddr ip)
{
bool fResult = false;
{ {
LOCK(cs_setBanned); LOCK(cs_setBanned);
for (banmap_t::iterator it = setBanned.begin(); it != setBanned.end(); it++) for (banmap_t::iterator it = setBanned.begin(); it != setBanned.end(); it++)
@ -477,27 +475,25 @@ bool CConnman::IsBanned(CNetAddr ip)
CSubNet subNet = (*it).first; CSubNet subNet = (*it).first;
CBanEntry banEntry = (*it).second; CBanEntry banEntry = (*it).second;
if(subNet.Match(ip) && GetTime() < banEntry.nBanUntil) if (subNet.Match(ip) && GetTime() < banEntry.nBanUntil) {
fResult = true; return true;
} }
} }
return fResult; return false;
} }
bool CConnman::IsBanned(CSubNet subnet) bool CConnman::IsBanned(CSubNet subnet)
{
bool fResult = false;
{ {
LOCK(cs_setBanned); LOCK(cs_setBanned);
banmap_t::iterator i = setBanned.find(subnet); banmap_t::iterator i = setBanned.find(subnet);
if (i != setBanned.end()) if (i != setBanned.end())
{ {
CBanEntry banEntry = (*i).second; CBanEntry banEntry = (*i).second;
if (GetTime() < banEntry.nBanUntil) if (GetTime() < banEntry.nBanUntil) {
fResult = true; return true;
} }
} }
return fResult; return false;
} }
void CConnman::Ban(const CNetAddr& addr, const BanReason &banReason, int64_t bantimeoffset, bool sinceUnixEpoch) { void CConnman::Ban(const CNetAddr& addr, const BanReason &banReason, int64_t bantimeoffset, bool sinceUnixEpoch) {