[taler-merchant] branch master updated: fix #6904

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository merchant.

The following commit(s) were added to refs/heads/master by this push:
     new 5a838bfb fix #6904
5a838bfb is described below

commit 5a838bfb359b78cbef8ad3fcd1f6dffd13f897d2
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Wed Jun 16 23:15:18 2021 +0200

    fix #6904
---
 src/backend/taler-merchant-httpd_private-post-orders.c | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/src/backend/taler-merchant-httpd_private-post-orders.c 
b/src/backend/taler-merchant-httpd_private-post-orders.c
index 6208fdcf..ad7cef4b 100644
--- a/src/backend/taler-merchant-httpd_private-post-orders.c
+++ b/src/backend/taler-merchant-httpd_private-post-orders.c
@@ -980,7 +980,15 @@ patch_order (struct MHD_Connection *connection,
                                       "merchant_pub",
                                       GNUNET_JSON_from_data_auto (
                                         &hc->instance->merchant_pub)));
-  /* FIXME: #6904: transform 'true' in $forgettable into random salts! */
+  if (GNUNET_OK !=
+      TALER_JSON_contract_seed_forgettable (order))
+  {
+    return TALER_MHD_reply_with_error (
+      connection,
+      MHD_HTTP_BAD_REQUEST,
+      TALER_EC_GENERIC_JSON_INVALID,
+      "could not compute hash of order due to bogus forgettable fields");
+  }
   /* sanity check result */
   {
     struct GNUNET_HashCode hc;

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.