aarifullin/neoneo-go
1
0
Fork 0
forked from TrueCloudLab/neoneo-go
Code Pull requests Activity

native: add calling script hash to NEP5 transfer witness check

Browse source 
Fix transfers from contract's address.
This commit is contained in:
Roman Khimov 2020-07-15 22:52:35 +03:00
parent d4c3a17883
commit 59be6bcd24
1 changed files with 8 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
pkg/core/native/native_nep5.go
View file

@ -175,13 +175,15 @@ func (c *nep5TokenNative) transfer(ic *interop.Context, from, to util.Uint160, a
return errors.New("negative amount") return errors.New("negative amount")
} }
caller := ic.ScriptGetter.GetCallingScriptHash()
if caller.Equals(util.Uint160{}) || !from.Equals(caller) {
ok, err := runtime.CheckHashedWitness(ic, from) ok, err := runtime.CheckHashedWitness(ic, from)
if err != nil { if err != nil {
return err return err
} else if !ok { } else if !ok {
return errors.New("invalid signature") return errors.New("invalid signature")
} }
}
isEmpty := from.Equals(to) || amount.Sign() == 0 isEmpty := from.Equals(to) || amount.Sign() == 0
inc := amount inc := amount
if isEmpty { if isEmpty {