From aecb6ff7dc5b15ccdf2fdb2167ced6801367d4cf Mon Sep 17 00:00:00 2001
From: Daniel Liu <139250065@qq.com>
Date: Mon, 3 Nov 2025 15:21:56 +0800
Subject: [PATCH] engine_v2: reject wrong signature earlier, close XFN-29
 (#1661)

---
 consensus/XDPoS/engines/engine_v2/verifyHeader.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/consensus/XDPoS/engines/engine_v2/verifyHeader.go b/consensus/XDPoS/engines/engine_v2/verifyHeader.go
index 7e27e2bcde..e621b8d530 100644
--- a/consensus/XDPoS/engines/engine_v2/verifyHeader.go
+++ b/consensus/XDPoS/engines/engine_v2/verifyHeader.go
@@ -41,6 +41,8 @@ func (x *XDPoS_v2) verifyHeader(chain consensus.ChainReader, header *types.Heade
 	if len(header.Validator) == 0 {
 		// This should never happen, if it does, then it means the peer is sending us invalid data.
 		return consensus.ErrNoValidatorSignatureV2
+	} else if len(header.Validator) != 65 {
+		return fmt.Errorf("invalid validator signature length %d, want 65", len(header.Validator))
 	}
 
 	if fullVerify {