Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Validate connection id associated with channel matches ids in controller port-id #444

Closed
3 tasks
seantking opened this issue Sep 28, 2021 · 1 comment
Closed
3 tasks
Assignees
Labels
27-interchain-accounts audit Feedback from implementation audit

Comments

@seantking
Copy link
Contributor

Summary

We need to do a check during the OnChanOpenTry step to validate that the connection-id/counterparty connection id given in the controller side port-id match the connection-ids associated with the current channel. e.g. ics27-1-<connection-id>-<counterparty-connection-id>-<address>

You can use the channelkeeper to check for the current connection-id/counterparty connection-id associated with the current channel. We should return an error if the connection-ids do no match.

Problem Definition

We need to do this check to ensure that a controller chain cannot steal the port-id namespace from another controller chain (which is handled via the connection-ids).


For Admin Use

  • Not duplicate issue
  • Appropriate labels applied
  • Appropriate contributors tagged/assigned
@damiannolan
Copy link
Contributor

Closed by #454

@crodriguezvega crodriguezvega moved this to Done in ibc-go Dec 30, 2021
faddat pushed a commit to notional-labs/ibc-go that referenced this issue Feb 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
27-interchain-accounts audit Feedback from implementation audit
Projects
No open projects
Archived in project
Development

No branches or pull requests

2 participants