v15.7.3: prevent passing down wrong orca pool data

Author: hacker-nova7431

dist/esm/index.js

@@ -1561,6 +1561,13 @@ const getPrice = async ({
       });
     }
 
+    let poolMints = [freshWhirlpoolData.tokenMintA.toString(), freshWhirlpoolData.tokenMintB.toString()];
+
+    if(!poolMints.includes(tokenIn) || !poolMints.includes(tokenOut)) {
+      console.log('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut);
+      throw('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut)
+    }
+
     const aToB = (freshWhirlpoolData.tokenMintA.toString() === tokenIn);
 
     const tickArrays = await getTickArrays({ pool: account.pubkey, freshWhirlpoolData, aToB });

dist/esm/index.svm.js

@@ -3764,6 +3764,13 @@ const getPrice = async ({
       });
     }
 
+    let poolMints = [freshWhirlpoolData.tokenMintA.toString(), freshWhirlpoolData.tokenMintB.toString()];
+
+    if(!poolMints.includes(tokenIn) || !poolMints.includes(tokenOut)) {
+      console.log('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut);
+      throw('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut)
+    }
+
     const aToB = (freshWhirlpoolData.tokenMintA.toString() === tokenIn);
 
     const tickArrays = await getTickArrays({ pool: account.pubkey, freshWhirlpoolData, aToB });

dist/umd/index.js

@@ -1566,6 +1566,13 @@
         });
       }
 
+      let poolMints = [freshWhirlpoolData.tokenMintA.toString(), freshWhirlpoolData.tokenMintB.toString()];
+
+      if(!poolMints.includes(tokenIn) || !poolMints.includes(tokenOut)) {
+        console.log('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut);
+        throw('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut)
+      }
+
       const aToB = (freshWhirlpoolData.tokenMintA.toString() === tokenIn);
 
       const tickArrays = await getTickArrays({ pool: account.pubkey, freshWhirlpoolData, aToB });

dist/umd/index.svm.js

@@ -3770,6 +3770,13 @@
         });
       }
 
+      let poolMints = [freshWhirlpoolData.tokenMintA.toString(), freshWhirlpoolData.tokenMintB.toString()];
+
+      if(!poolMints.includes(tokenIn) || !poolMints.includes(tokenOut)) {
+        console.log('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut);
+        throw('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut)
+      }
+
       const aToB = (freshWhirlpoolData.tokenMintA.toString() === tokenIn);
 
       const tickArrays = await getTickArrays({ pool: account.pubkey, freshWhirlpoolData, aToB });

package.evm.json

@@ -1,7 +1,7 @@
 {
   "name": "@depay/web3-exchanges-evm",
   "moduleName": "Web3Exchanges",
-  "version": "15.7.2",
+  "version": "15.7.3",
   "description": "JavaScript library simplifying decentralized web3 exchange routing for multiple blockchains and exchanges.",
   "main": "dist/umd/index.evm.js",
   "module": "dist/esm/index.evm.js",

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@depay/web3-exchanges",
   "moduleName": "Web3Exchanges",
-  "version": "15.7.2",
+  "version": "15.7.3",
   "description": "JavaScript library simplifying decentralized web3 exchange routing for multiple blockchains and exchanges.",
   "main": "dist/umd/index.js",
   "module": "dist/esm/index.js",

package.svm.json

@@ -1,7 +1,7 @@
 {
   "name": "@depay/web3-exchanges-svm",
   "moduleName": "Web3Exchanges",
-  "version": "15.7.2",
+  "version": "15.7.3",
   "description": "JavaScript library simplifying decentralized web3 exchange routing for multiple blockchains and exchanges.",
   "main": "dist/umd/index.svm.js",
   "module": "dist/esm/index.svm.js",

src/platforms/svm/orca/price/index.js

@@ -43,6 +43,13 @@ const getPrice = async ({
       })
     }
 
+    let poolMints = [freshWhirlpoolData.tokenMintA.toString(), freshWhirlpoolData.tokenMintB.toString()]
+
+    if(!poolMints.includes(tokenIn) || !poolMints.includes(tokenOut)) {
+      console.log('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut)
+      throw('wrong freshWhirlpoolData!', poolMints, tokenIn, tokenOut)
+    }
+
     const aToB = (freshWhirlpoolData.tokenMintA.toString() === tokenIn)
 
     const tickArrays = await getTickArrays({ pool: account.pubkey, freshWhirlpoolData, aToB })