fix: MEDIUM/LOW bugs - validation, unread tracking, TLS bounds, KeyPackage checks
- H17: Add unread count tracking to MarmotGroupChatroom - M8: Add MAX_OPAQUE_SIZE bounds check to TLS deserialization - M13: Add version/ciphersuite validation on KeyPackage deserialization - M24: Add logging before deleting corrupted group state in restoreAll - L1: Add size limit to sentKeys map in MlsGroup - Additional UI fixes: leave group cleanup, error handling improvements - Fix MarmotSubscriptionManagerTest for updated API https://claude.ai/code/session_018gVkmmYgMFtBH7G31pCk9N
This commit is contained in:
Claude
+2
-1
@@ -77,7 +77,8 @@ fun CreateGroupScreen(
|
||||
} catch (e: Exception) {
|
||||
isCreating = false
|
||||
launch(Dispatchers.Main) {
|
||||
Toast.makeText(
|
||||
Toast
|
||||
.makeText(
|
||||
context,
|
||||
"Failed to create group: ${e.message}",
|
||||
Toast.LENGTH_LONG,
|
||||
|
||||
+2
-1
@@ -139,7 +139,8 @@ fun MarmotGroupMessageComposer(
|
||||
onMessageSent()
|
||||
} catch (e: Exception) {
|
||||
launch(Dispatchers.Main) {
|
||||
Toast.makeText(
|
||||
Toast
|
||||
.makeText(
|
||||
context,
|
||||
"Failed to send message: ${e.message}",
|
||||
Toast.LENGTH_SHORT,
|
||||
|
||||
+18
-2
@@ -20,6 +20,7 @@
|
||||
*/
|
||||
package com.vitorpamplona.amethyst.ui.screen.loggedIn.chats.marmotGroup
|
||||
|
||||
import android.widget.Toast
|
||||
import androidx.compose.foundation.clickable
|
||||
import androidx.compose.foundation.layout.Arrangement
|
||||
import androidx.compose.foundation.layout.Column
|
||||
@@ -57,7 +58,6 @@ import androidx.compose.ui.text.font.FontWeight
|
||||
import androidx.compose.ui.text.style.TextOverflow
|
||||
import androidx.compose.ui.unit.dp
|
||||
import androidx.lifecycle.compose.collectAsStateWithLifecycle
|
||||
import android.widget.Toast
|
||||
import com.vitorpamplona.amethyst.commons.marmot.GroupMemberInfo
|
||||
import com.vitorpamplona.amethyst.ui.navigation.navs.INav
|
||||
import com.vitorpamplona.amethyst.ui.navigation.routes.Route
|
||||
@@ -85,8 +85,10 @@ fun MarmotGroupInfoScreen(
|
||||
val groupRelays by chatroom.relays.collectAsStateWithLifecycle()
|
||||
var members by remember { mutableStateOf(emptyList<GroupMemberInfo>()) }
|
||||
var showLeaveDialog by remember { mutableStateOf(false) }
|
||||
var isLeaving by remember { mutableStateOf(false) }
|
||||
val scope = rememberCoroutineScope()
|
||||
val myPubkey = accountViewModel.account.signer.pubKey
|
||||
val context = LocalContext.current
|
||||
|
||||
LaunchedEffect(nostrGroupId) {
|
||||
members = accountViewModel.marmotGroupMembers(nostrGroupId)
|
||||
@@ -224,10 +226,24 @@ fun MarmotGroupInfoScreen(
|
||||
groupName = displayName ?: "this group",
|
||||
onConfirm = {
|
||||
showLeaveDialog = false
|
||||
isLeaving = true
|
||||
scope.launch(Dispatchers.IO) {
|
||||
try {
|
||||
accountViewModel.leaveMarmotGroup(nostrGroupId)
|
||||
}
|
||||
accountViewModel.account.marmotGroupList.removeGroup(nostrGroupId)
|
||||
nav.nav(Route.MarmotGroupList)
|
||||
} catch (e: Exception) {
|
||||
isLeaving = false
|
||||
launch(Dispatchers.Main) {
|
||||
Toast
|
||||
.makeText(
|
||||
context,
|
||||
"Failed to leave group: ${e.message}",
|
||||
Toast.LENGTH_LONG,
|
||||
).show()
|
||||
}
|
||||
}
|
||||
}
|
||||
},
|
||||
onDismiss = { showLeaveDialog = false },
|
||||
)
|
||||
|
||||
+22
@@ -121,6 +121,14 @@ class MarmotManager(
|
||||
welcomeEvent: WelcomeEvent,
|
||||
nostrGroupId: HexKey,
|
||||
): WelcomeResult {
|
||||
// Validate that the provided nostrGroupId matches the WelcomeEvent's h-tag if present
|
||||
val eventGroupId = welcomeEvent.nostrGroupId()
|
||||
if (eventGroupId != null && eventGroupId != nostrGroupId) {
|
||||
return WelcomeResult.Error(
|
||||
"nostrGroupId mismatch: expected $nostrGroupId but WelcomeEvent has $eventGroupId",
|
||||
)
|
||||
}
|
||||
|
||||
val result = inboundProcessor.processWelcome(welcomeEvent, nostrGroupId)
|
||||
|
||||
if (result is WelcomeResult.Joined) {
|
||||
@@ -153,6 +161,20 @@ class MarmotManager(
|
||||
keyPackageEventId: HexKey,
|
||||
relays: List<NormalizedRelayUrl>,
|
||||
): Pair<OutboundGroupEvent, WelcomeDelivery?> {
|
||||
// Verify that the KeyPackage credential matches the expected member pubkey
|
||||
val kp =
|
||||
com.vitorpamplona.quartz.marmot.mls.messages.MlsKeyPackage.decodeTls(
|
||||
com.vitorpamplona.quartz.marmot.mls.codec
|
||||
.TlsReader(keyPackageBytes),
|
||||
)
|
||||
val credential = kp.leafNode.credential
|
||||
require(credential is Credential.Basic) {
|
||||
"KeyPackage must use BasicCredential"
|
||||
}
|
||||
require(credential.identity.toHexKey() == memberPubKey) {
|
||||
"KeyPackage credential identity does not match memberPubKey"
|
||||
}
|
||||
|
||||
val commitResult = groupManager.addMember(nostrGroupId, keyPackageBytes)
|
||||
val commitEvent = outboundProcessor.buildCommitEvent(nostrGroupId, commitResult.commitBytes)
|
||||
|
||||
|
||||
+6
@@ -47,6 +47,7 @@ class MarmotGroupChatroom(
|
||||
var relays = MutableStateFlow<List<String>>(emptyList())
|
||||
var memberCount = MutableStateFlow(0)
|
||||
var newestMessage: Note? = null
|
||||
val unreadCount = MutableStateFlow(0)
|
||||
|
||||
private var changesFlow: WeakReference<MutableSharedFlow<ListChange<Note>>> = WeakReference(null)
|
||||
|
||||
@@ -73,6 +74,7 @@ class MarmotGroupChatroom(
|
||||
newestMessage = msg
|
||||
}
|
||||
|
||||
unreadCount.value += 1
|
||||
changesFlow.get()?.tryEmit(ListChange.Addition(msg))
|
||||
return true
|
||||
}
|
||||
@@ -95,6 +97,10 @@ class MarmotGroupChatroom(
|
||||
return false
|
||||
}
|
||||
|
||||
fun markAsRead() {
|
||||
unreadCount.value = 0
|
||||
}
|
||||
|
||||
fun pruneMessagesToTheLatestOnly(): Set<Note> {
|
||||
val sorted = messages.sortedWith(DefaultFeedOrder)
|
||||
val toKeep =
|
||||
|
||||
@@ -31,6 +31,11 @@ class TlsReader(
|
||||
private var position: Int = 0,
|
||||
private val limit: Int = data.size,
|
||||
) {
|
||||
companion object {
|
||||
/** Maximum allowed size for a single opaque field (1 MB) */
|
||||
const val MAX_OPAQUE_SIZE = 1_048_576
|
||||
}
|
||||
|
||||
val remaining: Int get() = limit - position
|
||||
|
||||
val hasRemaining: Boolean get() = position < limit
|
||||
@@ -87,12 +92,18 @@ class TlsReader(
|
||||
/** Read a variable-length opaque with 2-byte length prefix */
|
||||
fun readOpaque2(): ByteArray {
|
||||
val length = readUint16()
|
||||
require(length <= MAX_OPAQUE_SIZE) {
|
||||
"Opaque2 length $length exceeds maximum allowed size $MAX_OPAQUE_SIZE"
|
||||
}
|
||||
return readBytes(length)
|
||||
}
|
||||
|
||||
/** Read a variable-length opaque with 4-byte length prefix */
|
||||
fun readOpaque4(): ByteArray {
|
||||
val length = readUint32().toInt()
|
||||
require(length <= MAX_OPAQUE_SIZE) {
|
||||
"Opaque4 length $length exceeds maximum allowed size $MAX_OPAQUE_SIZE"
|
||||
}
|
||||
return readBytes(length)
|
||||
}
|
||||
|
||||
@@ -130,6 +141,9 @@ class TlsReader(
|
||||
/** Read a variable-length opaque with QUIC-style VarInt length prefix */
|
||||
fun readOpaqueVarInt(): ByteArray {
|
||||
val length = readVarInt()
|
||||
require(length <= MAX_OPAQUE_SIZE) {
|
||||
"OpaqueVarInt length $length exceeds maximum allowed size $MAX_OPAQUE_SIZE"
|
||||
}
|
||||
return readBytes(length)
|
||||
}
|
||||
|
||||
|
||||
@@ -153,6 +153,7 @@ class MlsGroup private constructor(
|
||||
senderDataSecret = epochSecrets.senderDataSecret,
|
||||
encryptionSecret = epochSecrets.encryptionSecret,
|
||||
leafCount = tree.leafCount,
|
||||
exporterSecret = epochSecrets.exporterSecret,
|
||||
)
|
||||
|
||||
val memberCount: Int
|
||||
|
||||
+29
@@ -25,8 +25,10 @@ import com.vitorpamplona.quartz.marmot.mls.codec.TlsWriter
|
||||
import com.vitorpamplona.quartz.marmot.mls.crypto.MlsCryptoProvider
|
||||
import com.vitorpamplona.quartz.marmot.mls.messages.CommitResult
|
||||
import com.vitorpamplona.quartz.marmot.mls.messages.KeyPackageBundle
|
||||
import com.vitorpamplona.quartz.marmot.mls.schedule.KeySchedule
|
||||
import com.vitorpamplona.quartz.marmot.mls.schedule.SecretTree
|
||||
import com.vitorpamplona.quartz.nip01Core.core.HexKey
|
||||
import com.vitorpamplona.quartz.utils.Log
|
||||
import kotlinx.coroutines.sync.Mutex
|
||||
import kotlinx.coroutines.sync.withLock
|
||||
|
||||
@@ -402,6 +404,33 @@ class MlsGroupManager(
|
||||
32,
|
||||
)
|
||||
|
||||
/**
|
||||
* Return exporter secrets from retained epochs for a group.
|
||||
*
|
||||
* Used by the inbound processor to attempt outer decryption with
|
||||
* previous epoch keys when the current epoch's key fails (e.g.,
|
||||
* after a commit has advanced the epoch but late-arriving messages
|
||||
* still use the old exporter key).
|
||||
*
|
||||
* @param nostrGroupId hex-encoded Nostr group ID
|
||||
* @return list of retained exporter secrets (most recent first), each
|
||||
* derived via MLS-Exporter("marmot", "group-event", 32)
|
||||
*/
|
||||
fun retainedExporterSecrets(nostrGroupId: HexKey): List<ByteArray> {
|
||||
val retained = retainedEpochs[nostrGroupId] ?: return emptyList()
|
||||
return retained
|
||||
.filter { it.exporterSecret.isNotEmpty() }
|
||||
.sortedByDescending { it.epoch }
|
||||
.map { epochSecrets ->
|
||||
KeySchedule.mlsExporter(
|
||||
epochSecrets.exporterSecret,
|
||||
"marmot",
|
||||
"group-event".encodeToByteArray(),
|
||||
32,
|
||||
)
|
||||
}
|
||||
}
|
||||
|
||||
// --- Private Helpers ---
|
||||
|
||||
private fun requireGroup(nostrGroupId: HexKey): MlsGroup =
|
||||
|
||||
+9
-4
@@ -118,10 +118,14 @@ data class MlsKeyPackage(
|
||||
}
|
||||
|
||||
companion object {
|
||||
fun decodeTls(reader: TlsReader): MlsKeyPackage =
|
||||
MlsKeyPackage(
|
||||
version = reader.readUint16(),
|
||||
cipherSuite = reader.readUint16(),
|
||||
fun decodeTls(reader: TlsReader): MlsKeyPackage {
|
||||
val version = reader.readUint16()
|
||||
require(version == 1) { "Unsupported MLS version: $version" }
|
||||
val cipherSuite = reader.readUint16()
|
||||
require(cipherSuite == 1) { "Unsupported ciphersuite: $cipherSuite" }
|
||||
return MlsKeyPackage(
|
||||
version = version,
|
||||
cipherSuite = cipherSuite,
|
||||
initKey = reader.readOpaqueVarInt(),
|
||||
leafNode = LeafNode.decodeTls(reader),
|
||||
extensions = reader.readVectorVarInt { Extension.decodeTls(it) },
|
||||
@@ -129,6 +133,7 @@ data class MlsKeyPackage(
|
||||
)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* A KeyPackage bundled with its private keys (for the owner).
|
||||
|
||||
+21
-10
@@ -22,6 +22,7 @@ package com.vitorpamplona.quartz.marmot
|
||||
|
||||
import com.vitorpamplona.quartz.marmot.mip03GroupMessages.GroupEvent
|
||||
import com.vitorpamplona.quartz.nip59Giftwrap.wraps.GiftWrapEvent
|
||||
import kotlinx.coroutines.test.runTest
|
||||
import kotlin.test.Test
|
||||
import kotlin.test.assertEquals
|
||||
import kotlin.test.assertFalse
|
||||
@@ -38,7 +39,8 @@ class MarmotSubscriptionManagerTest {
|
||||
private val groupId2 = "c".repeat(64)
|
||||
|
||||
@Test
|
||||
fun testSubscribeGroup() {
|
||||
fun testSubscribeGroup() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
|
||||
manager.subscribeGroup(groupId1)
|
||||
@@ -48,7 +50,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSubscribeGroupWithSince() {
|
||||
fun testSubscribeGroupWithSince() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
val since = 1700000000L
|
||||
|
||||
@@ -62,7 +65,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testUnsubscribeGroup() {
|
||||
fun testUnsubscribeGroup() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
|
||||
manager.subscribeGroup(groupId1)
|
||||
@@ -73,7 +77,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testMultipleGroups() {
|
||||
fun testMultipleGroups() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
|
||||
manager.subscribeGroup(groupId1)
|
||||
@@ -86,7 +91,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testUpdateGroupSince() {
|
||||
fun testUpdateGroupSince() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
val newSince = 1700000000L
|
||||
|
||||
@@ -110,7 +116,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testGiftWrapFilterWithSince() {
|
||||
fun testGiftWrapFilterWithSince() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
val since = 1700000000L
|
||||
|
||||
@@ -121,7 +128,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testActiveGroupFiltersContainCorrectKind() {
|
||||
fun testActiveGroupFiltersContainCorrectKind() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
|
||||
manager.subscribeGroup(groupId1)
|
||||
@@ -134,7 +142,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testBuildFiltersIncludesBothTypes() {
|
||||
fun testBuildFiltersIncludesBothTypes() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
|
||||
manager.subscribeGroup(groupId1)
|
||||
@@ -164,7 +173,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSyncWithGroupManager() {
|
||||
fun testSyncWithGroupManager() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
|
||||
// Start with one group
|
||||
@@ -179,7 +189,8 @@ class MarmotSubscriptionManagerTest {
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testClear() {
|
||||
fun testClear() =
|
||||
runTest {
|
||||
val manager = MarmotSubscriptionManager(userPubKey)
|
||||
|
||||
manager.subscribeGroup(groupId1)
|
||||
|
||||
Reference in New Issue
Block a user