github AntelopeIO/leap v4.0.5
Leap v4.0.5
on GitHub

latest releases: v5.0.3, v5.0.2, v4.0.6...
2 years ago

Leap v4.0.5 is a patch release containing a security update and an important change to ensure encoding compatibility between API nodes across multiple versions of Leap.

📝 Node Operators that depend on snapshots or state_history_plugin with chain-state-history enabled should upgrade. Users running state_history_plugin with only trace-history are not affected.
📝 This release fixes cleos interoperability with nodeos 5.0

Expand the release notes below for an in depth look at the Leap v4.0.5 release including a summary of important changes, and a complete change log.

Leap v4.0.5 Release Notes

Important Updates

Mitigation of Potential Denial of Service to Snapshots & SHiP

A security vulnerability has been mitigated, preventing errors in state_history_plugin and snapshot functionality in certain edge case conditions (PR 1964).

Node Operators that depend on snapshots or state_history_plugin with chain-state-history enabled should upgrade. Users running state_history_plugin with only trace-history are not affected.

Cleos compatibility with nodeos 5.0 and later

This release fixes cleos interoperability with nodeos 5.0.

Other Changes

Block Processing

Improved Block Time Reporting: Enhanced log statements for block time reporting (PR #1434).

Validating Accepted Blocks: Enhanced process to signal accepted_block after validation (PR #1769).

Connection Handling

HTTP Connection Error Handling: Ignored HTTP error in remote_endpoint() to prevent termination (PR #1453).

HTTP Connection Reset Check: Added checks for connection_reset (PR #1663).

Shutdown Handling

Improved shutdown handling for the resource monitor manager plugin (PR #1774).

Error Handling

Trace API Plugin (trace_api_plugin) Enhancement: Modified to report serialization errors to users (PR #1468).

EOS VM OC Code Cache Recreation: Added functionality to recreate EOS VM OC code cache if it becomes corrupt (PR #1780).

Bug Fixes

SHiP (state_history_plugin) Improvements

Fixed issues including stack overflow, invalid index, and split file access (PR #1779).

Ensured appending to index file is correctly handled (PR #1801).

Fix read/write switching segfault

Fixed a potential segfault when switching between read/write processing windows/modes (PR #1719).

Fix cleos setcode and setabi

Resolved issues with non-working cleos set code and set abi commands (PR #1900).

Other Changes

Return WASM configuration settings only when enabled (PR #1770).

WASM configuration settings are now only returned when the "CONFIGURABLE_WASM_LIMITS2" protocol feature is enabled. This change reduces confusion and potential errors.


Change Log

Pull Requests

  • [4.0] Fix block time reporting log statement by @heifner in #1434
  • [3.2 -> 4.0] Ignore http error on remote_endpoint() causing terminate by @heifner in #1453
  • [3.2 -> 4.0] Modify trace_api_plugin to report serialization errors to user by @heifner in #1468
  • [4.0] HTTP: Check for connection_reset by @heifner in #1663
  • [4.0] Fix possible segfault switching between read/write windows by @heifner in #1719
  • [4.0] Only return wasm config settings if configurable wasm limits enabled by @heifner in #1770
  • [4.0] Signal accepted_block after it is marked valid by @heifner in #1769
  • [4.0] hardening resource monitor manager plugin shutdown handling by @linh2931 in #1774
  • [4.0] Recreate EOS VM OC code cache if corrupt by @heifner in #1780
  • [4.0] SHiP: Fixes: Stack overflow, invalid index, split file access by @heifner in #1779
  • [4.0] SHiP: Make sure we append to index file by @heifner in #1801
  • [3.2 -> 4.0] Do not require trailing = for base64 encoded strings by @heifner in #1892
  • [3.2 -> 4.0] Fix non-working cleos set code and set abi commands by @linh2931 in #1900
  • [3.2 -> 4.0] consolidated security fixes for 4.0.5 by @spoonincode in #1964
  • [4.0] bump version to 4.0.5 by @spoonincode in #1965


Contributors


Full Changelog: v4.0.4...v4.0.5


Check out latest releases or
releases around AntelopeIO/leap v4.0.5

Don't miss a new leap release

NewReleases is sending notifications on new releases.

Get notifications