View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0008832 | Taler | libeufin (general) | public | 2024-05-13 10:12 | 2024-07-25 22:11 |
| Reporter | Florian Dold | Assigned To | Antoine A | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | urgent | Severity | block | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Target Version | 0.12 | Fixed in Version | 0.12 | ||
| Summary | 0008832: conversion logic sometimes bounces a transaction via nexus *and* credits libeufin-bank. | ||||
| Description | Obviously disastrous, as it allows users to duplicate their money. It only seems to happen *sometimes*. In particular, it happened for an instant transaction that was made before we enabled ICT support on the EBICS account. One possible (completely unconfirmed) explanation might be that we see the same transaction twice, but for some reason one time we bounce it and one time we credit the conversion account?! More information communicated privately, as the relevant data contains PII. | ||||
| Tags | No tags attached. | ||||
| Fixed in ce31d171834bcf493ab39f41db64ad1961b610c5 using a temporary fix The problem identified is not a conversion logic bug. What's happening is that the EBICS implementation was flawed, announcing the same transaction with different TxId's in different files, causing libeufin-nexus to register twice. The first time the transaction was accepted, the second time it was bounced due to the reuse of reserve public keys | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-05-13 10:12 | Florian Dold | New Issue | |
| 2024-05-13 10:12 | Florian Dold | Status | new => assigned |
| 2024-05-13 10:12 | Florian Dold | Assigned To | => Antoine A |
| 2024-05-13 19:22 | Christian Grothoff | Target Version | 0.11 => 0.12 |
| 2024-05-31 02:02 | Antoine A | Status | assigned => informing |
| 2024-05-31 02:02 | Antoine A | Resolution | open => fixed |
| 2024-05-31 02:02 | Antoine A | Note Added: 0022494 | |
| 2024-07-25 22:11 | Christian Grothoff | Fixed in Version | => 0.12 |
| 2024-07-25 22:11 | Christian Grothoff | Status | informing => closed |