---
title: "GHSA-q73f-w3h7-7wcc: Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result"
url: https://erroneo.us/security/ghsa/GHSA-q73f-w3h7-7wcc/
description: "GHSA-q73f-w3h7-7wcc (critical, crates.io (Rust)): Nervos CKB Transaction which calls syscall loadcelldatahash has nondeterministic result. Impact Tx-pool…"
type: advisory
section: "Security Digest"
date_published: 2024-02-03
date_modified: 2024-02-03
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-q73f-w3h7-7wcc"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-q73f-w3h7-7wcc: Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

## Affected packages

- crates.io (Rust) `ckb` <= 0.34.1 → fixed: 0.34.2

## Details

Impact Tx-pool verify transaction which inputs' script contains loadcelldatahash is nondeterministic Workarounds Enforce tx-pool ResolvedTrascation inputs' load data is none.

## Sources

- [GitHub Advisory GHSA-q73f-w3h7-7wcc](https://github.com/advisories/GHSA-q73f-w3h7-7wcc)
- [github.com](https://github.com/nervosnetwork/ckb/security/advisories/GHSA-q73f-w3h7-7wcc)
- [github.com](https://github.com/nervosnetwork/ckb/commit/01eb5b2ecadf7e421b117d6c013e182978746e2f)
- [github.com](https://github.com/nervosnetwork/ckb/commit/fe83220905599e72c97878295f4769e91348d738)
- [github.com](https://github.com/nervosnetwork/ckb/commit/ff88b48779358e038209f3ac1bc1061e6f4deb13)

---
Source page: https://erroneo.us/security/ghsa/GHSA-q73f-w3h7-7wcc/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt