frystal

Strict checking for '/multistream/1.0.0' prefix in remote peer protocol negotiation is missing when rust-libp2p acts as dialer

2

### Summary When rust-libp2p acts as the connection initiator (dialer), it appears that it does not strictly check whether the remote peer's (responder) protocol negotiation message always starts with "/multistream/1.0.0"....

- **Version**: "js-libp2p":"js-libp2p-v0.46.14" "@libp2p/multistream-select",:"4.0.3" - **Platform**: Ubuntu20.04 - **Subsystem**: multistream-select #### Severity: Very Low #### Description: I find bug in the select function in multistream-select that does not strictly adhere...

Bug Report: Stuck Goroutine in libp2p-pubsub handleSendingMessages

3

## Description: A critical issue has been identified in the libp2p-pubsub library. Specifically, in the process of a peer publishing a new RPC message to other peers through the function...

## Describe the bug While running the local Filecoin network following the instructions from https://lotus.filecoin.io/lotus/developers/local-network/, I let Forest join the local Filecoin network. After applying the network chaos method random...

### Sophon Service / 智子服务 - [X] venus - [ ] sophon-messager - [ ] sophon-miner - [ ] sophon-auth - [ ] sophon-gateway - [ ] sophon-co - [...

Venus Node Cannot Sync with Latest Chain Head in Local Development Filecoin Network When Under Network Packets Drop

3

### Sophon Service / 智子服务 - [X] venus - [ ] sophon-messager - [ ] sophon-miner - [ ] sophon-auth - [ ] sophon-gateway - [ ] sophon-co - [...

Lotus daemon crash

7

### Checklist - [X] This is **not** a security-related bug/issue. If it is, please follow please follow the [security policy](https://github.com/filecoin-project/lotus/security/policy). - [X] I **have** searched on the [issue tracker](https://github.com/filecoin-project/lotus/issues) and...