Skip to content

SIMD-0431: revise to use minimum extension size approach#3

Merged
deanmlittle merged 2 commits intoblueshift-gg:permissioned-extend-programfrom
buffalojoec:simd-0431-min-extend
Mar 18, 2026
Merged

SIMD-0431: revise to use minimum extension size approach#3
deanmlittle merged 2 commits intoblueshift-gg:permissioned-extend-programfrom
buffalojoec:simd-0431-min-extend

Conversation

@buffalojoec
Copy link
Copy Markdown

Revises 0431 to drop the permissioned signer and instead enforce a 10 KiB
minimum on ExtendProgram. Instruction remains permissionless, accounts list
does not change, and CPI restrictions are unchanged.

The 10 KiB floor makes greifing cost ~0.072 SOL per extend, which plugs the DoS
vector economically without breaking multisigs or self-upgrading programs.

Creds to jstarry for the idea.

- Near max account size (10 MiB): allow sub-10 KiB extends when less
  than 10 KiB of headroom remains
- Frozen programs: already rejected by the loader with Immutable
@deanmlittle
Copy link
Copy Markdown

lgtm

@deanmlittle deanmlittle merged commit 5be22bc into blueshift-gg:permissioned-extend-program Mar 18, 2026
2 checks passed
deanmlittle pushed a commit that referenced this pull request Mar 25, 2026
* Add review status

* Updated (#3)

* Updated

* Fix lint

* Update audit details

* Update keys
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants