enforce wire deadline >= refund_deadline in exchange

2016-05-20 15:39:24 +02:00 · 2016-05-20 15:39:24 +02:00 · 35509528bc
commit 35509528bc
parent 281eeeed46
1 changed files with 8 additions and 0 deletions
--- a/src/exchange/taler-exchange-httpd_deposit.c
+++ b/src/exchange/taler-exchange-httpd_deposit.c
@ -180,6 +180,14 @@ TMH_DEPOSIT_handler_deposit (struct TMH_RequestHandler *rh,
  if (GNUNET_NO == res)
    return MHD_YES; /* failure */

+  if (deposit.refund_deadline.abs_value_us > deposit.wire_deadline.abs_value_us)
+  {
+    GNUNET_break_op (0);
+    GNUNET_JSON_parse_free (spec);
+    return TMH_RESPONSE_reply_arg_invalid (connection,
+                                           "refund_deadline");
+  }
+
  if (GNUNET_YES !=
      TMH_json_validate_wireformat (wire,
                                    GNUNET_NO))