Make stratum implementation align with ckpool #560

New issue

Open

opened 2026-05-27 14:06:10 +00:00 by paratoxic · 0 comments

paratoxic commented

2026-05-27 14:06:10 +00:00

Owner

para too strict

Nonce2 Length (MAJOR)ckpool: Silently truncates or pads nonce2 to correct lengthif (nlen > len) nonce2[len] = '\0'; // Truncate
else if (nlen < len) { /* Pad with zeros */ }
para: Strictly rejects with InvalidNonce2Length error
if submit.enonce2.len() != expected_extranonce2_size {
// Send error and reject share
}
Nonce Length
ckpool: Silently truncates nonce to 8 characters
if (unlikely(nlen > len)) nonce[len] = '\0'; // len = 8
para: Strict hex parsing via Nonce::from_str
Version Mask (mining.submit)
ckpool: Ignores invalid version_mask, uses 0
if (version_mask && strlen(version_mask) && validhex(version_mask)) {
// Only parse if valid
}
// Otherwise version_mask32 stays 0, no error
para: Strict deserialization fails on invalid version
Empty Submit Params
ckpool: Accepts missing password (sets to "")
para: Also accepts (via Option)

para too lenient

Nonce Minimum Length (CRITICAL)
ckpool: Requires nonce to be at least 8 hex characters
if (unlikely(!nonce || strlen(nonce) < 8 || !validhex(nonce))) {
err = SE_NO_NONCE; // Error if < 8 chars
}
para: Accepts any valid u32 hex (as short as "0")
let nonce = u32::from_str_radix(s, 16)?; // "0", "1", "abc" all valid
Odd-Length Hex Strings
ckpool: Strictly rejects odd-length hex
if (!slen || slen % 2) // Rejects odd length
para: Some hex fields accept odd-length (we just fixed subscribe, but nonce/ntime/version still accept odd-length via from_str_radix)
Username Validation
ckpool: Rejects:

Empty usernames
Usernames starting with "." or "_"
Usernames containing "/"
para: Accepts any string, only validates as Bitcoin address later

Password Length
ckpool: Max 64 characters (strndup(pass, 64))
para: No explicit limit
Empty Nonce
ckpool: Rejects empty nonce strings
para: Would fail parsing but error message differs

Misc

Nonce2/Nonce Length Tolerance

ckpool auto-corrects malformed nonce2 and nonce values from miners:

nonce2: If the miner sends fewer hex chars than expected
(wb->enonce2varlen), ckpool truncates silently. If longer, it also
truncates.
nonce: If longer than 8 hex chars, ckpool truncates to 8 chars:
nonce[len] = '\0' (stratifier.c:6059).

para rejects immediately with InvalidNonce2Length if enonce2.len() != expected_extranonce2_size (stratifier.rs:692). Nonce is deserialized with
a fixed 4-byte type so invalid lengths fail at parse time.

Some miner firmware (especially older or buggy implementations) may send
slightly wrong lengths. ckpool silently handles this; para rejects the
share.

### para too strict 1. Nonce2 Length (MAJOR)ckpool: Silently truncates or pads nonce2 to correct lengthif (nlen > len) nonce2[len] = '\0'; // Truncate else if (nlen < len) { /* Pad with zeros */ } para: Strictly rejects with InvalidNonce2Length error if submit.enonce2.len() != expected_extranonce2_size { // Send error and reject share } 2. Nonce Length ckpool: Silently truncates nonce to 8 characters if (unlikely(nlen > len)) nonce[len] = '\0'; // len = 8 para: Strict hex parsing via Nonce::from_str 3. Version Mask (mining.submit) ckpool: Ignores invalid version_mask, uses 0 if (version_mask && strlen(version_mask) && validhex(version_mask)) { // Only parse if valid } // Otherwise version_mask32 stays 0, no error para: Strict deserialization fails on invalid version 4. Empty Submit Params ckpool: Accepts missing password (sets to "") para: Also accepts (via Option<String>) ### para too lenient 1. Nonce Minimum Length (CRITICAL) ckpool: Requires nonce to be at least 8 hex characters if (unlikely(!nonce || strlen(nonce) < 8 || !validhex(nonce))) { err = SE_NO_NONCE; // Error if < 8 chars } para: Accepts any valid u32 hex (as short as "0") let nonce = u32::from_str_radix(s, 16)?; // "0", "1", "abc" all valid 2. Odd-Length Hex Strings ckpool: Strictly rejects odd-length hex if (!slen || slen % 2) // Rejects odd length para: Some hex fields accept odd-length (we just fixed subscribe, but nonce/ntime/version still accept odd-length via from_str_radix) 3. Username Validation ckpool: Rejects: - Empty usernames - Usernames starting with "." or "_" - Usernames containing "/" para: Accepts any string, only validates as Bitcoin address later 4. Password Length ckpool: Max 64 characters (strndup(pass, 64)) para: No explicit limit 5. Empty Nonce ckpool: Rejects empty nonce strings para: Would fail parsing but error message differs ### Misc Nonce2/Nonce Length Tolerance ckpool auto-corrects malformed nonce2 and nonce values from miners: - **nonce2**: If the miner sends fewer hex chars than expected (`wb->enonce2varlen`), ckpool truncates silently. If longer, it also truncates. - **nonce**: If longer than 8 hex chars, ckpool truncates to 8 chars: `nonce[len] = '\0'` (stratifier.c:6059). para rejects immediately with `InvalidNonce2Length` if `enonce2.len() != expected_extranonce2_size` (stratifier.rs:692). Nonce is deserialized with a fixed 4-byte type so invalid lengths fail at parse time. Some miner firmware (especially older or buggy implementations) may send slightly wrong lengths. ckpool silently handles this; para rejects the share.