From 35509528bc10546f11934ab3e965e9de16a6910f Mon Sep 17 00:00:00 2001
From: Christian Grothoff <christian@grothoff.org>
Date: Fri, 20 May 2016 15:39:24 +0200
Subject: enforce wire deadline >= refund_deadline in exchange

---
 src/exchange/taler-exchange-httpd_deposit.c | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'src/exchange')

diff --git a/src/exchange/taler-exchange-httpd_deposit.c b/src/exchange/taler-exchange-httpd_deposit.c
index cf5142982..08f4d227d 100644
--- a/src/exchange/taler-exchange-httpd_deposit.c
+++ b/src/exchange/taler-exchange-httpd_deposit.c
@@ -180,6 +180,14 @@ TMH_DEPOSIT_handler_deposit (struct TMH_RequestHandler *rh,
   if (GNUNET_NO == res)
     return MHD_YES; /* failure */
 
+  if (deposit.refund_deadline.abs_value_us > deposit.wire_deadline.abs_value_us)
+  {
+    GNUNET_break_op (0);
+    GNUNET_JSON_parse_free (spec);
+    return TMH_RESPONSE_reply_arg_invalid (connection,
+                                           "refund_deadline");
+  }
+
   if (GNUNET_YES !=
       TMH_json_validate_wireformat (wire,
                                     GNUNET_NO))
-- 
cgit v1.2.3