VDB
Sign up
—

GO-2023-1882

Deadlock in github.com/cometbft/cometbft/consensus

Quick fix

GO-2023-1882 — github.com/cometbft/cometbft: upgrade to the fixed version with the command below.

go get github.com/cometbft/cometbft@v0.37.2

Details

An internal modification to the way PeerState is serialized to JSON introduced a deadlock when the new function MarshalJSON is called.

This function can be called in two ways. The first is via logs, by setting the consensus logging module to "debug" level (which should not happen in production), and setting the log output format to JSON. The second is via RPC dump_consensus_state.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/cometbft/cometbft
Introduced in: 0.37.1Fixed in: 0.37.2
Fixgo get github.com/cometbft/cometbft@v0.37.2

References