kylefang/quorum-examples
1
0
Fork 0
mirror of https://github.com/tappollo/quorum-examples.git synced 2026-01-12 17:03:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #31 from jpmorganchase/porosity-integration

Browse Source 
Add Porosity examples
This commit is contained in:
Patrick Mylund Nielsen
2017-07-27 15:30:04 -04:00
committed by GitHub
parent 42509b48c8 4ff9c1cc98
commit c9b1547ffa
5 changed files with 78 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
examples/7nodes/porosity/README.md Normal file
View File

@@ -0,0 +1,4 @@
This demonstrates how to use Matt Suiche's Porosity decompiler from
inside Quorum. Try to `runscript.sh porosity/deploy-vulnerable.js`,
then `runscript.sh porosity/scan.sh` to see it in action, or use it
interactively in the console with `quorum.runPorosity`.

19
examples/7nodes/porosity/deploy-nonvulnerable.js Normal file
View File

@@ -0,0 +1,19 @@
a = eth.accounts[0]
web3.eth.defaultAccount = a;
var simpleSource = 'contract simplestorage { uint public storedData; function simplestorage(uint initVal) { storedData = initVal; } function set(uint x) { storedData = x; } function get() constant returns (uint retVal) { return storedData; } }'
var simpleCompiled = web3.eth.compile.solidity(simpleSource);
var simpleRoot = Object.keys(simpleCompiled)[0];
var simpleContract = web3.eth.contract(simpleCompiled[simpleRoot].info.abiDefinition);
var simple = simpleContract.new(42, {from:web3.eth.accounts[0], data: simpleCompiled[simpleRoot].code, gas: 300000, privateFor: ["ROAZBWtSacxXQrOe3FGAqJDyJjFePR5ce4TSIzmJ0Bc="]}, function(e, contract) {
if (e) {
console.log("err creating contract", e);
} else {
if (!contract.address) {
console.log("Contract transaction send: TransactionHash: " + contract.transactionHash + " waiting to be mined...");
} else {
console.log("Contract mined! Address: " + contract.address);
console.log(contract);
}
}
});

16
examples/7nodes/porosity/deploy-vulnerable.js Normal file
View File

@@ -0,0 +1,16 @@
var src = 'contract SendBalance { mapping ( address => uint ) userBalances ; bool withdrawn = false ; function getBalance (address u) constant returns ( uint ){ return userBalances [u]; } function addToBalance () { userBalances[msg.sender] += msg.value ; } function withdrawBalance (){ if (!(msg.sender.call.gas(0x1111).value ( userBalances [msg . sender ])())) { throw ; } userBalances [msg.sender ] = 0; } }';
var compiled = web3.eth.compile.solidity(src);
var root = Object.keys(compiled)[0];
var contract = web3.eth.contract(compiled[root].info.abiDefinition);
var c = contract.new(42, {from:web3.eth.accounts[0], data: compiled[root].code, gas: 300000, privateFor: ["ROAZBWtSacxXQrOe3FGAqJDyJjFePR5ce4TSIzmJ0Bc="]}, function(e, contract) {
if (e) {
console.log("err creating contract", e);
} else {
if (!contract.address) {
console.log("Contract transaction send: TransactionHash: " + contract.transactionHash + " waiting to be mined...");
} else {
console.log("Vulnerable contract mined! Address: " + contract.address);
console.log(contract);
}
}
});

29
examples/7nodes/porosity/scan.js Normal file
View File

@@ -0,0 +1,29 @@
function scanBlock(blockNumber) {
var b = eth.getBlock(blockNumber);
for (var i = 0; i < b.transactions.length; i++) {
var tx = eth.getTransaction(b.transactions[i]);
var code;
if (tx.v == 37 || tx.v == 38) { // private
code = quorum.getPrivatePayload(tx.input);
if (code === "0x") {
continue // we weren't a party to this transaction
}
} else {
// code = tx.input;
continue; // skip public transactions
}
var isVulnerable = quorum.runPorosity({"code": code, "decompile": true, "silent": true})
if (isVulnerable) {
console.log("Reentrant vulnerability in block " + tx.blockNumber +
":\nTransaction: " + tx.hash +
"\nFrom: " + tx.from +
"\nTo: " + (tx.to === null ? "Contract creation" : tx.to)
);
}
}
}
console.log("Scanning all private transactions for vulnerabilities");
for (var i = 0; i < eth.blockNumber; i++) {
scanBlock(i);
}

20
examples/7nodes/script1.js
View File

@@ -6,14 +6,14 @@ var simpleCompiled = web3.eth.compile.solidity(simpleSource);
var simpleRoot = Object.keys(simpleCompiled)[0];
var simpleContract = web3.eth.contract(simpleCompiled[simpleRoot].info.abiDefinition);
var simple = simpleContract.new(42, {from:web3.eth.accounts[0], data: simpleCompiled[simpleRoot].code, gas: 300000, privateFor: ["ROAZBWtSacxXQrOe3FGAqJDyJjFePR5ce4TSIzmJ0Bc="]}, function(e, contract) {
if (e) {
console.log("err creating contract", e);
} else {
if (!contract.address) {
console.log("Contract transaction send: TransactionHash: " + contract.transactionHash + " waiting to be mined...");
} else {
console.log("Contract mined! Address: " + contract.address);
console.log(contract);
}
}
if (e) {
console.log("err creating contract", e);
} else {
if (!contract.address) {
console.log("Contract transaction send: TransactionHash: " + contract.transactionHash + " waiting to be mined...");
} else {
console.log("Contract mined! Address: " + contract.address);
console.log(contract);
}
}
});