package sync import ( "context" "sort" "github.com/libp2p/go-libp2p-core/peer" pubsub "github.com/libp2p/go-libp2p-pubsub" ethpb "github.com/prysmaticlabs/ethereumapis/eth/v1alpha1" "github.com/prysmaticlabs/prysm/beacon-chain/core/blocks" "github.com/prysmaticlabs/prysm/beacon-chain/core/state" "github.com/prysmaticlabs/prysm/shared/hashutil" "github.com/prysmaticlabs/prysm/shared/params" "github.com/prysmaticlabs/prysm/shared/sliceutil" "github.com/prysmaticlabs/prysm/shared/traceutil" "go.opencensus.io/trace" ) // Clients who receive an attester slashing on this topic MUST validate the conditions within VerifyAttesterSlashing before // forwarding it across the network. func (r *Service) validateAttesterSlashing(ctx context.Context, pid peer.ID, msg *pubsub.Message) bool { // Validation runs on publish (not just subscriptions), so we should approve any message from // ourselves. if pid == r.p2p.PeerID() { return true } // The head state will be too far away to validate any slashing. if r.initialSync.Syncing() { return false } ctx, span := trace.StartSpan(ctx, "sync.validateAttesterSlashing") defer span.End() m, err := r.decodePubsubMessage(msg) if err != nil { log.WithError(err).Error("Failed to decode message") traceutil.AnnotateError(span, err) return false } slashing, ok := m.(*ethpb.AttesterSlashing) if !ok { return false } if slashing == nil || slashing.Attestation_1 == nil || slashing.Attestation_2 == nil { return false } if r.hasSeenAttesterSlashingIndices(slashing.Attestation_1.AttestingIndices, slashing.Attestation_2.AttestingIndices) { return false } // Retrieve head state, advance state to the epoch slot used specified in slashing message. s, err := r.chain.HeadState(ctx) if err != nil { return false } slashSlot := slashing.Attestation_1.Data.Target.Epoch * params.BeaconConfig().SlotsPerEpoch if s.Slot() < slashSlot { if ctx.Err() != nil { return false } var err error s, err = state.ProcessSlots(ctx, s, slashSlot) if err != nil { return false } } if err := blocks.VerifyAttesterSlashing(ctx, s, slashing); err != nil { return false } msg.ValidatorData = slashing // Used in downstream subscriber return true } // Returns true if the node has already received a valid attester slashing with the attesting indices. func (r *Service) hasSeenAttesterSlashingIndices(indices1 []uint64, indices2 []uint64) bool { r.seenAttesterSlashingLock.RLock() defer r.seenAttesterSlashingLock.RUnlock() slashableIndices := sliceutil.IntersectionUint64(indices1, indices2) sort.SliceStable(slashableIndices, func(i, j int) bool { return slashableIndices[i] < slashableIndices[j] }) IndicesInBytes := make([]byte, 0, len(slashableIndices)) for _, i := range slashableIndices { IndicesInBytes = append(IndicesInBytes, byte(i)) } b := hashutil.FastSum256(IndicesInBytes) _, seen := r.seenAttesterSlashingCache.Get(b) return seen } // Set attester slashing indices in attester slashing cache. func (r *Service) setAttesterSlashingIndicesSeen(indices1 []uint64, indices2 []uint64) { r.seenAttesterSlashingLock.Lock() defer r.seenAttesterSlashingLock.Unlock() slashableIndices := sliceutil.IntersectionUint64(indices1, indices2) sort.SliceStable(slashableIndices, func(i, j int) bool { return slashableIndices[i] < slashableIndices[j] }) IndicesInBytes := make([]byte, 0, len(slashableIndices)) for _, i := range slashableIndices { IndicesInBytes = append(IndicesInBytes, byte(i)) } b := hashutil.FastSum256(IndicesInBytes) r.seenAttesterSlashingCache.Add(b, true) }