gavindiaz/solana-streamer
1
0
Fork 0
mirror of https://github.com/0xfnzero/solana-streamer.git synced 2026-08-26 07:18:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(pumpfun): add account length check for create_v2 to avoid panic

Browse Source 
- Require accounts.len() >= 16 in parse_create_v2_token_instruction
- Require accounts.len() >= 14 in parse_create_token_instruction

Made-with: Cursor
This commit is contained in:
Wood
2026-03-07 12:11:50 +08:00
parent b281a4be52
commit 04df6db0b0
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/streaming/event_parser/protocols/pumpfun/parser.rs
+6 -2
View File
@@ -114,6 +114,7 @@ fn parse_trade_inner_instruction(data: &[u8], metadata: EventMetadata) -> Option
/// 账户: 0: mint, 1: mint_authority, 2: bonding_curve, 3: associated_bonding_curve, 4: global, /// 账户: 0: mint, 1: mint_authority, 2: bonding_curve, 3: associated_bonding_curve, 4: global,
/// 5: mpl_token_metadata, 6: metadata_account, 7: user, 8: system_program, 9: token_program, /// 5: mpl_token_metadata, 6: metadata_account, 7: user, 8: system_program, 9: token_program,
/// 10: associated_token_program, 11: rent, 12: event_authority, 13: program. /// 10: associated_token_program, 11: rent, 12: event_authority, 13: program.
/// 共 14 个固定账户，不足时返回 None 避免越界。
fn parse_create_token_instruction( fn parse_create_token_instruction(
data: &[u8], data: &[u8],
accounts: &[Pubkey], accounts: &[Pubkey],
@@ -121,7 +122,8 @@ fn parse_create_token_instruction(
) -> Option<DexEvent> { ) -> Option<DexEvent> {
metadata.event_type = EventType::PumpFunCreateToken; metadata.event_type = EventType::PumpFunCreateToken;
if data.len() < 16 || accounts.len() < 11 { const CREATE_TOKEN_MIN_ACCOUNTS: usize = 14;
if data.len() < 16 || accounts.len() < CREATE_TOKEN_MIN_ACCOUNTS {
return None; return None;
} }
let mut offset = 0; let mut offset = 0;
@@ -189,6 +191,7 @@ fn parse_create_token_instruction(
/// 账户: 0: mint, 1: mint_authority, 2: bonding_curve, 3: associated_bonding_curve, 4: global, /// 账户: 0: mint, 1: mint_authority, 2: bonding_curve, 3: associated_bonding_curve, 4: global,
/// 5: user, 6: system_program, 7: token_program, 8: associated_token_program, 9: mayhem_program_id, /// 5: user, 6: system_program, 7: token_program, 8: associated_token_program, 9: mayhem_program_id,
/// 10: global_params, 11: sol_vault, 12: mayhem_state, 13: mayhem_token_vault, 14: event_authority, 15: program. /// 10: global_params, 11: sol_vault, 12: mayhem_state, 13: mayhem_token_vault, 14: event_authority, 15: program.
/// 共 16 个固定账户，不足时返回 None 避免越界。
fn parse_create_v2_token_instruction( fn parse_create_v2_token_instruction(
data: &[u8], data: &[u8],
accounts: &[Pubkey], accounts: &[Pubkey],
@@ -196,7 +199,8 @@ fn parse_create_v2_token_instruction(
) -> Option<DexEvent> { ) -> Option<DexEvent> {
metadata.event_type = EventType::PumpFunCreateV2Token; metadata.event_type = EventType::PumpFunCreateV2Token;
if data.len() < 16 || accounts.len() < 11 { const CREATE_V2_MIN_ACCOUNTS: usize = 16;
if data.len() < 16 || accounts.len() < CREATE_V2_MIN_ACCOUNTS {
return None; return None;
} }
let mut offset = 0; let mut offset = 0;