fabric-samples/fabric-samples-main/token-sdk/owner/service/balance.go
Madhu18S da9245aa5f fix: harden token quantity parsing boundaries and enforce zero-output interception logic
Signed-off-by: Madhu Sripada <madhu.s.sripada@gmail.com>
Signed-off-by: Madhu18S <madhu.s.sripada@gmail.com>
2026-05-26 22:17:36 +05:30

73 lines
2.1 KiB
Go

/*
Copyright IBM Corp. All Rights Reserved.
SPDX-License-Identifier: Apache-2.0
*/
package service
import (
"strconv"
"github.com/hyperledger-labs/fabric-token-sdk/token"
"github.com/hyperledger-labs/fabric-token-sdk/token/services/ttx"
"github.com/pkg/errors"
)
// SERVICE
type BalanceByWallet map[string]ValueByTokenType
type ValueByTokenType map[string]uint64 // Changed value type from int64 to uint64 to eliminate signed overflow anomalies
// GetAllBalances returns a map of all wallets with their balances per token type
func (s TokenService) GetAllBalances() (walletBalance BalanceByWallet, err error) {
walletBalance = make(BalanceByWallet)
wm := token.GetManagementService(s.FSC).WalletManager()
wallets, err := wm.OwnerWalletIDs()
if err != nil {
return walletBalance, errors.Wrap(err, "can't get list of wallets")
}
logger.Infof("getting balances for %v", wallets)
for _, w := range wallets {
b, err := s.GetBalance(w, "")
if err != nil {
logger.Error(err)
return walletBalance, err
}
walletBalance[w] = b
}
return
}
// GetBalance returns the balances per token type of a wallet
func (s TokenService) GetBalance(wallet string, tokenType string) (typeVal ValueByTokenType, err error) {
typeVal = make(ValueByTokenType)
// Tokens owned by identities in this wallet will be listed
if wallet == "" {
return typeVal, errors.New("no wallet id provided")
}
w := ttx.GetWallet(s.FSC, wallet)
if w == nil {
return nil, errors.Errorf("wallet not found: %s", wallet)
}
unspentTokens, err := w.ListUnspentTokens(ttx.WithType(tokenType))
if err != nil {
return nil, errors.Wrap(err, "failed listing unspent tokens")
}
if len(unspentTokens.Tokens) == 0 {
return typeVal, nil
}
// Safely accumulate the values using strict unsigned boundaries matching transfer parameters
for _, token := range unspentTokens.Tokens {
val, err := strconv.ParseUint(token.Quantity, 10, 64)
if err != nil {
return typeVal, errors.Wrapf(err, "failed parsing token quantity for asset %s", token.Id.String())
}
typeVal[token.Type] += val
}
return typeVal, nil
}