Fixes #5001

core/chaincode/handler.go

@@ -474,7 +474,7 @@ func (h *Handler) notifyRegistry(err error) {
 	h.Registry.Ready(h.chaincodeID)
 }
 
-// HandleRegister is invoked when chaincode tries to register.
+// handleRegister is invoked when chaincode tries to register.
 func (h *Handler) HandleRegister(msg *pb.ChaincodeMessage) {
 	h.stateLock.RLock()
 	state := h.state
@@ -733,6 +733,17 @@ func (h *Handler) HandleGetStateMetadata(msg *pb.ChaincodeMessage, txContext *Tr
 
 // Handles query to ledger to rage query state
 func (h *Handler) HandleGetStateByRange(msg *pb.ChaincodeMessage, txContext *TransactionContext) (*pb.ChaincodeMessage, error) {
+	// Defer panic recovery
+	defer func() {
+		if r := recover(); r != nil {
+			chaincodeLogger.Errorf("Panic in HandleGetStateByRange: %v", r)
+			// Clean up any query context that may have been created
+			if txContext != nil {
+				txContext.CleanupQueryContext("")
+			}
+		}
+	}()
+
 	getStateByRange := &pb.GetStateByRange{}
 	err := proto.Unmarshal(msg.Payload, getStateByRange)
 	if err != nil {
@@ -750,6 +761,12 @@ func (h *Handler) HandleGetStateByRange(msg *pb.ChaincodeMessage, txContext *Tra
 	isPaginated := false
 	namespaceID := txContext.NamespaceID
 	collection := getStateByRange.Collection
+
+	// Validate start and end keys
+	if getStateByRange.StartKey == "" && getStateByRange.EndKey == "" {
+		return nil, errors.New("start key and end key must not both be empty")
+	}
+
 	if isCollectionSet(collection) {
 		if txContext.IsInitTransaction {
 			return nil, errors.New("private data APIs are not allowed in chaincode Init()")
@@ -767,14 +784,29 @@ func (h *Handler) HandleGetStateByRange(msg *pb.ChaincodeMessage, txContext *Tra
 				startKey = metadata.Bookmark
 			}
 		}
+
+		// Validate page size
+		if metadata.PageSize < 1 {
+			return nil, errors.New("page size must be greater than zero")
+		}
+
 		rangeIter, err = txContext.TXSimulator.GetStateRangeScanIteratorWithPagination(namespaceID,
 			startKey, getStateByRange.EndKey, metadata.PageSize)
 	} else {
 		rangeIter, err = txContext.TXSimulator.GetStateRangeScanIterator(namespaceID, getStateByRange.StartKey, getStateByRange.EndKey)
 	}
+
 	if err != nil {
+		// Clean up any resources if error occurs
+		txContext.CleanupQueryContext(iterID)
 		return nil, errors.WithStack(err)
 	}
+
+	if rangeIter == nil {
+		txContext.CleanupQueryContext(iterID)
+		return nil, errors.New("range query iterator is nil")
+	}
+
 	txContext.InitializeQueryContext(iterID, rangeIter)
 
 	payload, err := h.QueryResponseBuilder.BuildQueryResponse(txContext, rangeIter, iterID, isPaginated, totalReturnLimit)

core/ledger/kvledger/txmgmt/statedb/stateleveldb/stateleveldb.go

@@ -8,6 +8,7 @@ package stateleveldb
 
 import (
 	"bytes"
+	"fmt"
 
 	"github.com/hyperledger/fabric-lib-go/common/flogging"
 	"github.com/hyperledger/fabric/common/ledger/dataformat"
@@ -164,10 +165,28 @@ func (vdb *versionedDB) GetStateRangeScanIteratorWithPagination(namespace string
 	if endKey == "" {
 		dataEndKey[len(dataEndKey)-1] = lastKeyIndicator
 	}
-	dbItr, err := vdb.db.GetIterator(dataStartKey, dataEndKey)
+
+	// Wrap the iterator creation in a recover block
+	var dbItr iterator.Iterator
+	var err error
+
+	func() {
+		defer func() {
+			if r := recover(); r != nil {
+				err = fmt.Errorf("panic while creating iterator: %v", r)
+			}
+		}()
+		dbItr, err = vdb.db.GetIterator(dataStartKey, dataEndKey)
+	}()
+
 	if err != nil {
-		return nil, err
+		return nil, errors.WithMessage(err, "error getting iterator from db")
+	}
+
+	if dbItr == nil {
+		return nil, errors.New("nil iterator returned from db")
 	}
+
 	return newKVScanner(namespace, dbItr, pageSize), nil
 }
 

gossip/gossip/algo/pull.go

@@ -319,11 +319,18 @@ func (engine *PullEngine) OnRes(items []string, nonce uint64) {
 }
 
 func (engine *PullEngine) newNONCE() uint64 {
-	n := uint64(0)
-	for {
-		n = util.RandomUInt64()
-		if !engine.outgoingNONCES.Exists(n) {
+	engine.lock.Lock()
+	defer engine.lock.Unlock()
+
+	maxAttempts := 100
+	for i := 0; i < maxAttempts; i++ {
+		n := util.RandomUInt64()
+		if n != 0 && !engine.outgoingNONCES.Exists(n) {
 			return n
 		}
 	}
+
+	// If we couldn't generate a unique NONCE after max attempts,
+	// use time-based fallback
+	return uint64(time.Now().UnixNano())
 }

gossip/util/misc.go

@@ -7,9 +7,8 @@ SPDX-License-Identifier: Apache-2.0
 package util
 
 import (
-	crand "crypto/rand"
 	"fmt"
-	"math/rand/v2"
+	"math/rand"
 	"reflect"
 	"runtime"
 	"sync"
@@ -18,12 +17,13 @@ import (
 	"github.com/spf13/viper"
 )
 
-var r *rand.Rand
+var (
+	r      *rand.Rand
+	rMutex sync.Mutex
+)
 
 func init() { // do we really need this?
-	var seed [32]byte
-	_, _ = crand.Read(seed[:])
-	r = rand.New(rand.NewChaCha8(seed))
+	r = rand.New(rand.NewSource(time.Now().UnixNano()))
 }
 
 // Equals returns whether a and b are the same
@@ -179,14 +179,16 @@ func SetVal(key string, val interface{}) {
 // RandomInt returns, as an int, a non-negative pseudo-random integer in [0,n)
 // It panics if n <= 0
 func RandomInt(n int) int {
-	return r.IntN(n)
+	return r.Intn(n)
 }
 
 // RandomUInt64 returns a random uint64
 //
 // If we want a rand that's non-global and specific to gossip, we can
 // establish one. Otherwise this uses the process-global locking RNG.
 func RandomUInt64() uint64 {
+	rMutex.Lock()
+	defer rMutex.Unlock()
 	return r.Uint64()
 }