diff --git a/programs/vote/src/vote_instruction.rs b/programs/vote/src/vote_instruction.rs index 27261107c5..f213201b59 100644 --- a/programs/vote/src/vote_instruction.rs +++ b/programs/vote/src/vote_instruction.rs @@ -15,12 +15,15 @@ use { feature_set, hash::Hash, instruction::{AccountMeta, Instruction, InstructionError}, - keyed_account::{from_keyed_account, get_signers, keyed_account_at_index, KeyedAccount}, + keyed_account::{ + check_sysvar_keyed_account, from_keyed_account, get_signers, keyed_account_at_index, + KeyedAccount, + }, process_instruction::{get_sysvar, InvokeContext}, program_utils::limited_deserialize, pubkey::Pubkey, system_instruction, - sysvar::{self, clock::Clock, slot_hashes::SlotHashes}, + sysvar::{self, clock::Clock, rent::Rent, slot_hashes::SlotHashes, Sysvar}, }, std::collections::HashSet, thiserror::Error, @@ -299,9 +302,8 @@ pub fn withdraw( fn verify_rent_exemption( keyed_account: &KeyedAccount, - rent_sysvar_account: &KeyedAccount, + rent: &Rent, ) -> Result<(), InstructionError> { - let rent: sysvar::rent::Rent = from_keyed_account(rent_sysvar_account)?; if !rent.is_exempt(keyed_account.lamports()?, keyed_account.data_len()?) { Err(InstructionError::InsufficientFunds) } else { @@ -309,6 +311,19 @@ fn verify_rent_exemption( } } +/// This method facilitates a transition from fetching sysvars from keyed +/// accounts to fetching from the sysvar cache without breaking consensus. In +/// order to keep consistent behavior, it continues to enforce the same checks +/// as `solana_sdk::keyed_account::from_keyed_account` despite dynamically +/// loading them instead of deserializing from account data. +fn get_sysvar_with_keyed_account_check( + keyed_account: &KeyedAccount, + invoke_context: &dyn InvokeContext, +) -> Result { + check_sysvar_keyed_account::(keyed_account)?; + get_sysvar(invoke_context, keyed_account.unsigned_key()) +} + pub fn process_instruction( _program_id: &Pubkey, data: &[u8], @@ -331,21 +346,24 @@ pub fn process_instruction( match limited_deserialize(data)? { VoteInstruction::InitializeAccount(vote_init) => { - verify_rent_exemption(me, keyed_account_at_index(keyed_accounts, 1)?)?; - vote_state::initialize_account( - me, - &vote_init, - &signers, - &from_keyed_account::(keyed_account_at_index(keyed_accounts, 2)?)?, - ) + let rent: Rent = get_sysvar_with_keyed_account_check( + keyed_account_at_index(keyed_accounts, 1)?, + invoke_context, + )?; + verify_rent_exemption(me, &rent)?; + let clock: Clock = get_sysvar_with_keyed_account_check( + keyed_account_at_index(keyed_accounts, 2)?, + invoke_context, + )?; + vote_state::initialize_account(me, &vote_init, &signers, &clock) + } + VoteInstruction::Authorize(voter_pubkey, vote_authorize) => { + let clock: Clock = get_sysvar_with_keyed_account_check( + keyed_account_at_index(keyed_accounts, 1)?, + invoke_context, + )?; + vote_state::authorize(me, &voter_pubkey, vote_authorize, &signers, &clock) } - VoteInstruction::Authorize(voter_pubkey, vote_authorize) => vote_state::authorize( - me, - &voter_pubkey, - vote_authorize, - &signers, - &from_keyed_account::(keyed_account_at_index(keyed_accounts, 1)?)?, - ), VoteInstruction::UpdateValidatorIdentity => vote_state::update_validator_identity( me, keyed_account_at_index(keyed_accounts, 1)?.unsigned_key(), @@ -356,13 +374,15 @@ pub fn process_instruction( } VoteInstruction::Vote(vote) | VoteInstruction::VoteSwitch(vote, _) => { inc_new_counter_info!("vote-native", 1); - vote_state::process_vote( - me, - &from_keyed_account::(keyed_account_at_index(keyed_accounts, 1)?)?, - &from_keyed_account::(keyed_account_at_index(keyed_accounts, 2)?)?, - &vote, - &signers, - ) + let slot_hashes: SlotHashes = get_sysvar_with_keyed_account_check( + keyed_account_at_index(keyed_accounts, 1)?, + invoke_context, + )?; + let clock: Clock = get_sysvar_with_keyed_account_check( + keyed_account_at_index(keyed_accounts, 2)?, + invoke_context, + )?; + vote_state::process_vote(me, &slot_hashes, &clock, &vote, &signers) } VoteInstruction::Withdraw(lamports) => { let to = keyed_account_at_index(keyed_accounts, 1)?; @@ -466,7 +486,7 @@ mod tests { let mut sysvar_cache = SysvarCache::default(); sysvar_cache.push_entry( sysvar::rent::id(), - bincode::serialize(&Rent::default()).unwrap(), + bincode::serialize(&Rent::free()).unwrap(), ); sysvar_cache.push_entry( sysvar::clock::id(), @@ -665,7 +685,7 @@ mod tests { #[test] fn test_minimum_balance() { - let rent = solana_sdk::rent::Rent::default(); + let rent = Rent::default(); let minimum_balance = rent.minimum_balance(VoteState::size_of()); // golden, may need updating when vote_state grows assert!(minimum_balance as f64 / 10f64.powf(9.0) < 0.04) diff --git a/sdk/src/keyed_account.rs b/sdk/src/keyed_account.rs index 88ac3acb3c..ce37e6799e 100644 --- a/sdk/src/keyed_account.rs +++ b/sdk/src/keyed_account.rs @@ -7,6 +7,7 @@ use { std::{ cell::{Ref, RefCell, RefMut}, iter::FromIterator, + ops::Deref, rc::Rc, }, }; @@ -246,14 +247,20 @@ where } } -pub fn from_keyed_account( - keyed_account: &crate::keyed_account::KeyedAccount, -) -> Result { +pub fn check_sysvar_keyed_account<'a, S: Sysvar>( + keyed_account: &'a crate::keyed_account::KeyedAccount<'_>, +) -> Result + 'a, InstructionError> { if !S::check_id(keyed_account.unsigned_key()) { return Err(InstructionError::InvalidArgument); } - from_account::(&*keyed_account.try_account_ref()?) - .ok_or(InstructionError::InvalidArgument) + keyed_account.try_account_ref() +} + +pub fn from_keyed_account( + keyed_account: &crate::keyed_account::KeyedAccount, +) -> Result { + let sysvar_account = check_sysvar_keyed_account::(keyed_account)?; + from_account::(&*sysvar_account).ok_or(InstructionError::InvalidArgument) } #[cfg(test)]