URI: 
       tsynchronizer: better handle history-status mismatch - electrum - Electrum Bitcoin wallet
  HTML git clone https://git.parazyd.org/electrum
   DIR Log
   DIR Files
   DIR Refs
   DIR Submodules
       ---
   DIR commit 228c4b45973f266ebcc06d3ebf3d633b41f3f702
   DIR parent 4a8286c744ab542d9893f202468ec86a171af791
  HTML Author: SomberNight <somber.night@protonmail.com>
       Date:   Wed, 24 Feb 2021 12:32:54 +0100
       
       synchronizer: better handle history-status mismatch
       
       When receiving the history of an address, the client behaved unexpectedly
       if either of two checks failed.
       The client checked that the txids in the history are unique, and that the
       history matches the previously announced status. If either failed, it
       would just log a line and do nothing. Importantly, the synchronizer could
       even consider itself is_up_to_date, i.e. the GUI could show the wallet is
       synced.
       
       This is now changed such that:
       - if the txid uniqueness test fails, we simply disconnect
       - if the history is not consistent with previously announced status,
         we wait a bit, make sure is_up_to_date is False in the meantime,
         and then potentially disconnect
       See rationale for these in the comments.
       
       related: https://github.com/spesmilo/electrum/issues/7058#issuecomment-783613084
       
       Diffstat:
         M electrum/interface.py               |       6 ++++++
         M electrum/synchronizer.py            |      28 +++++++++++++++++++---------
       
       2 files changed, 25 insertions(+), 9 deletions(-)
       ---
   DIR diff --git a/electrum/interface.py b/electrum/interface.py
       t@@ -953,6 +953,12 @@ class Interface(Logger):
                        if height < prev_height:
                            raise RequestCorrupted(f'heights of confirmed txs must be in increasing order')
                        prev_height = height
       +        hashes = set(map(lambda item: item['tx_hash'], res))
       +        if len(hashes) != len(res):
       +            # Either server is sending garbage... or maybe if server is race-prone
       +            # a recently mined tx could be included in both last block and mempool?
       +            # Still, it's simplest to just disregard the response.
       +            raise RequestCorrupted(f"server history has non-unique txids for sh={sh}")
                return res
        
            async def listunspent_for_scripthash(self, sh: str) -> List[dict]:
   DIR diff --git a/electrum/synchronizer.py b/electrum/synchronizer.py
       t@@ -24,7 +24,7 @@
        # SOFTWARE.
        import asyncio
        import hashlib
       -from typing import Dict, List, TYPE_CHECKING, Tuple
       +from typing import Dict, List, TYPE_CHECKING, Tuple, Set
        from collections import defaultdict
        import logging
        
       t@@ -35,7 +35,7 @@ from .transaction import Transaction, PartialTransaction
        from .util import bh2u, make_aiohttp_session, NetworkJobOnDefaultServer, random_shuffled_copy
        from .bitcoin import address_to_scripthash, is_address
        from .logging import Logger
       -from .interface import GracefulDisconnect
       +from .interface import GracefulDisconnect, NetworkTimeout
        
        if TYPE_CHECKING:
            from .network import Network
       t@@ -153,6 +153,7 @@ class Synchronizer(SynchronizerBase):
                super()._reset()
                self.requested_tx = {}
                self.requested_histories = set()
       +        self._stale_histories = dict()  # type: Dict[str, asyncio.Task]
        
            def diagnostic_name(self):
                return self.wallet.diagnostic_name()
       t@@ -160,34 +161,43 @@ class Synchronizer(SynchronizerBase):
            def is_up_to_date(self):
                return (not self.requested_addrs
                        and not self.requested_histories
       -                and not self.requested_tx)
       +                and not self.requested_tx
       +                and not self._stale_histories)
        
            async def _on_address_status(self, addr, status):
                history = self.wallet.db.get_addr_history(addr)
                if history_status(history) == status:
                    return
       +        # No point in requesting history twice for the same announced status.
       +        # However if we got announced a new status, we should request history again:
                if (addr, status) in self.requested_histories:
                    return
                # request address history
                self.requested_histories.add((addr, status))
       +        self._stale_histories.pop(addr, asyncio.Future()).cancel()
                h = address_to_scripthash(addr)
                self._requests_sent += 1
                async with self._network_request_semaphore:
                    result = await self.interface.get_history_for_scripthash(h)
                self._requests_answered += 1
                self.logger.info(f"receiving history {addr} {len(result)}")
       -        hashes = set(map(lambda item: item['tx_hash'], result))
                hist = list(map(lambda item: (item['tx_hash'], item['height']), result))
                # tx_fees
                tx_fees = [(item['tx_hash'], item.get('fee')) for item in result]
                tx_fees = dict(filter(lambda x:x[1] is not None, tx_fees))
       -        # Check that txids are unique
       -        if len(hashes) != len(result):
       -            self.logger.info(f"error: server history has non-unique txids: {addr}")
                # Check that the status corresponds to what was announced
       -        elif history_status(hist) != status:
       -            self.logger.info(f"error: status mismatch: {addr}")
       +        if history_status(hist) != status:
       +            # could happen naturally if history changed between getting status and history (race)
       +            self.logger.info(f"error: status mismatch: {addr}. we'll wait a bit for status update.")
       +            # The server is supposed to send a new status notification, which will trigger a new
       +            # get_history. We shall wait a bit for this to happen, otherwise we disconnect.
       +            async def disconnect_if_still_stale():
       +                timeout = self.network.get_network_timeout_seconds(NetworkTimeout.Generic)
       +                await asyncio.sleep(timeout)
       +                raise SynchronizerFailure(f"timeout reached waiting for addr {addr}: history still stale")
       +            self._stale_histories[addr] = await self.taskgroup.spawn(disconnect_if_still_stale)
                else:
       +            self._stale_histories.pop(addr, asyncio.Future()).cancel()
                    # Store received history
                    self.wallet.receive_history_callback(addr, hist, tx_fees)
                    # Request transactions we don't have