From 22e8b476d99bdb2679d073c61bca3f546c29fc5d Mon Sep 17 00:00:00 2001
From: Daniel Liu <139250065@qq.com>
Date: Mon, 3 Nov 2025 15:21:56 +0800
Subject: [PATCH] engine_v2: reject wrong signature earlier, close XFN-29
 (#1661)

---
 consensus/XDPoS/engines/engine_v2/verifyHeader.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/consensus/XDPoS/engines/engine_v2/verifyHeader.go b/consensus/XDPoS/engines/engine_v2/verifyHeader.go
index a6db7a781d..8af4d6f6a0 100644
--- a/consensus/XDPoS/engines/engine_v2/verifyHeader.go
+++ b/consensus/XDPoS/engines/engine_v2/verifyHeader.go
@@ -40,6 +40,8 @@ func (x *XDPoS_v2) verifyHeader(chain consensus.ChainReader, header *types.Heade
 	if len(header.Validator) == 0 {
 		// This should never happen, if it does, then it means the peer is sending us invalid data.
 		return consensus.ErrNoValidatorSignatureV2
+	} else if len(header.Validator) != 65 {
+		return fmt.Errorf("invalid validator signature length %d, want 65", len(header.Validator))
 	}
 
 	if fullVerify {