runtime: Verify freshness with RAK against latest state

oasisprotocol · Feb 23, 2024 · 2f7008a · 2f7008a
1 parent 595a1a2
commit 2f7008a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.changelog/5567.bugfix.md b/.changelog/5567.bugfix.md
@@ -0,0 +1 @@
+runtime: Verify freshness with RAK against latest state
diff --git a/runtime/src/consensus/tendermint/verifier/mod.rs b/runtime/src/consensus/tendermint/verifier/mod.rs
@@ -471,7 +471,8 @@ impl Verifier {
         // Verify our own RAK is published in registry once per epoch.
         // This ensures consensus state is recent enough.
         if cache.last_verified_epoch != epoch {
-            self.verify_freshness_with_rak(&next_state, cache)?;
+            let latest_state = self.latest_consensus_state(cache, instance)?;
+            self.verify_freshness_with_rak(&latest_state, cache)?;
         }
 
         // Cache verified state root and epoch.