logos-blockchain/lssa
1
0
Fork 0
mirror of https://github.com/logos-blockchain/lssa.git synced 2026-04-11 21:53:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge eed9cc629604a06882fd7d2f3e2b238d6cd72eb4 into 7a29b45cf49d1f52df5ac7367c2179400d4a592c

Browse Source
This commit is contained in:
buray 2026-04-11 14:44:09 +01:00 committed by GitHub
commit 4062cdd289
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 54 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
nssa/core/src/program.rs
View File

@ -494,8 +494,14 @@ pub fn validate_execution(
}
// 7. If a post state has default program owner, the pre state must have been a default
// account
if post.account.program_owner == DEFAULT_PROGRAM_ID && pre.account != Account::default() {
// account. Exception: if the account is completely unchanged (passthrough signer),
// allow it — this enables programs to verify external signers via is_authorized
// without claiming or modifying the signer's account.
// See: https://github.com/logos-blockchain/logos-execution-zone/issues/339
if post.account.program_owner == DEFAULT_PROGRAM_ID
&& pre.account != Account::default()
&& pre.account != post.account
{
return false;
}
}
@ -695,6 +701,52 @@ mod tests {
assert!(account_post_state.required_claim().is_none());
}
#[test]
fn passthrough_signer_account_allowed_in_rule_7() {
// Regression test for https://github.com/logos-blockchain/logos-execution-zone/issues/339
// Programs should be able to include external signer accounts (nonce > 0) in pre/post
// states unchanged, enabling is_authorized checks for multisig/governance programs.
use crate::account::{Account, AccountId, AccountWithMetadata, Data};
let signer_account = Account {
program_owner: DEFAULT_PROGRAM_ID,
balance: 0,
data: Data::default(),
nonce: 1u128.into(), // nonce > 0: previously used account
};
let program_id = [1u32; 8];
let account_id: AccountId = "11111111111111111111111111111111".parse().unwrap();
let pre = AccountWithMetadata {
account: signer_account.clone(),
is_authorized: true,
account_id: account_id.clone(),
};
let post = AccountPostState::new(signer_account.clone()); // unchanged
// Should pass: account is completely unchanged (passthrough signer)
let result = validate_execution(
&[pre.clone()],
&[post],
program_id,
);
assert!(result, "passthrough signer account should be allowed");
// Should fail: account is modified while still having DEFAULT_PROGRAM_ID owner
let mut modified_account = signer_account.clone();
modified_account.balance = 100;
let post_modified = AccountPostState::new(modified_account);
let result_modified = validate_execution(
&[pre],
&[post_modified],
program_id,
);
assert!(!result_modified, "modified default-owner account should be rejected");
}
#[test]
fn post_state_account_getter() {
let mut account = Account {