Skip to content

fix(core,txpool,ethapi): reject overflowing tx values#2289

Open
gzliudan wants to merge 1 commit intoXinFinOrg:dev-upgradefrom
gzliudan:fix-xdc-invalid-value
Open

fix(core,txpool,ethapi): reject overflowing tx values#2289
gzliudan wants to merge 1 commit intoXinFinOrg:dev-upgradefrom
gzliudan:fix-xdc-invalid-value

Conversation

@gzliudan
Copy link
Copy Markdown
Collaborator

@gzliudan gzliudan commented Apr 8, 2026

Proposed changes

Reject transaction values above uint256 max during txpool validation and execution.

Map the overflow to an invalid params RPC error and add focused unit tests.

fix #2287

Types of changes

What types of changes does your code introduce to XDC network?
Put an in the boxes that apply

  • build: Changes that affect the build system or external dependencies
  • ci: Changes to CI configuration files and scripts
  • chore: Changes that don't change source code or tests
  • docs: Documentation only changes
  • feat: A new feature
  • fix: A bug fix
  • perf: A code change that improves performance
  • refactor: A code change that neither fixes a bug nor adds a feature
  • revert: Revert something
  • style: Changes that do not affect the meaning of the code
  • test: Adding missing tests or correcting existing tests

Impacted Components

Which parts of the codebase does this PR touch?
Put an in the boxes that apply

  • Consensus
  • Account
  • Network
  • Geth
  • Smart Contract
  • External components
  • Not sure (Please specify below)

Checklist

Put an in the boxes once you have confirmed below actions (or provide reasons on not doing so) that

  • This PR has sufficient test coverage (unit/integration test) OR I have provided reason in the PR description for not having test coverage
  • Tested on a private network from the genesis block and monitored the chain operating correctly for multiple epochs.
  • Provide an end-to-end test plan in the PR description on how to manually test it on the devnet/testnet.
  • Tested the backwards compatibility.
  • Tested with XDC nodes running this version co-exist with those running the previous version.
  • Relevant documentation has been updated as part of this PR
  • N/A

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 8, 2026

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 2827d071-0f9b-461d-bda0-865884ff3408

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR hardens transaction handling by rejecting transaction value fields that exceed the uint256 maximum during txpool validation and EVM execution, and ensures the overflow is surfaced as an invalid-params style RPC validation error (where txValidationError is used).

Changes:

  • Add value overflow checks (BitLen() > 256) in txpool validation and EVM state transition.
  • Map ErrUint256Overflow to errCodeInvalidParams in txValidationError.
  • Add targeted unit tests covering overflow rejection paths in ethapi, txpool, and state processing.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
internal/ethapi/errors.go Maps ErrUint256Overflow to an invalid-params tx validation RPC error.
internal/ethapi/api_test.go Adds ethapi tests for overflow rejection and tx validation error mapping.
core/txpool/validation.go Rejects transactions whose value exceeds uint256 during basic tx validation.
core/txpool/legacypool/legacypool_test.go Adds a pool-level unit test asserting overflow values are rejected.
core/state_transition.go Treats value conversion overflow as ErrUint256Overflow during execution.
core/state_processor_test.go Adds an execution-level test ensuring ApplyTransactionWithEVM rejects overflow values.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Reject transaction values above uint256 max during txpool validation and execution.

Map the overflow to an invalid params RPC error and add focused unit tests.
@gzliudan gzliudan force-pushed the fix-xdc-invalid-value branch from 7dd662e to d85e939 Compare April 8, 2026 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants