fix(consensus): use Locale.ROOT for case-insensitive string operations

String.toLowerCase()/toUpperCase() without an explicit Locale uses
Locale.getDefault(), which on Turkish (tr) or Azerbaijani (az) systems
folds 'I' to dotless-ı (U+0131) instead of 'i' (U+0069). This caused
AccountIdIndexStore to generate different index keys on tr/az nodes,
enabling a consensus split where tr/az nodes accept duplicate accountId
transactions that other nodes reject.

Fix AccountIdIndexStore.getLowerCaseAccountId to use Locale.ROOT, and
add a legacy fallback in get()/has() so that tr/az nodes can still
read old data stored with the locale-sensitive key.

Also fix all other toLowerCase()/toUpperCase() calls across the
codebase and enable the built-in ErrorProne StringCaseLocaleUsage
checker at ERROR level to prevent future regressions at compile time.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: halibobo1205

actuator/src/main/java/org/tron/core/actuator/AssetIssueActuator.java

@@ -22,6 +22,7 @@
 import java.util.ArrayList;
 import java.util.Iterator;
 import java.util.List;
+import java.util.Locale;
 import java.util.Objects;
 import lombok.extern.slf4j.Slf4j;
 import org.tron.common.math.StrictMathWrapper;
@@ -166,7 +167,7 @@ public boolean validate() throws ContractValidateException {
     }
 
     if (dynamicStore.getAllowSameTokenName() != 0) {
-      String name = assetIssueContract.getName().toStringUtf8().toLowerCase();
+      String name = assetIssueContract.getName().toStringUtf8().toLowerCase(Locale.ROOT);
       if (("trx").equals(name)) {
         throw new ContractValidateException("assetName can't be trx");
       }

build.gradle

@@ -1,10 +1,16 @@
 import org.gradle.nativeplatform.platform.internal.Architectures
 import org.gradle.internal.os.OperatingSystem
+
+plugins {
+    id 'net.ltgt.errorprone' version '5.0.0' apply false
+}
+
 allprojects {
     version = "1.0.0"
     apply plugin: "java-library"
     ext {
         springVersion = "5.3.39"
+        errorproneVersion = "2.42.0"
     }
 }
 def arch = System.getProperty("os.arch").toLowerCase()
@@ -107,6 +113,23 @@ subprojects {
         testImplementation "org.mockito:mockito-core:4.11.0"
         testImplementation "org.mockito:mockito-inline:4.11.0"
     }
+    if (project.name != 'protocol' && javaVersion.isJava11Compatible()) {
+        apply plugin: 'net.ltgt.errorprone'
+        dependencies {
+            errorprone "com.google.errorprone:error_prone_core:${errorproneVersion}"
+        }
+        tasks.withType(JavaCompile).configureEach {
+            options.errorprone {
+                enabled = true
+                disableWarningsInGeneratedCode = true
+                disableAllChecks = true
+                excludedPaths = '.*/generated/.*'
+                errorproneArgs.addAll([
+                        '-Xep:StringCaseLocaleUsage:ERROR',
+                ])
+            }
+        }
+    }
 
     task sourcesJar(type: Jar, dependsOn: classes) {
         classifier = "sources"

chainbase/src/main/java/org/tron/core/db/TronDatabase.java

@@ -2,6 +2,7 @@
 
 import com.google.protobuf.InvalidProtocolBufferException;
 import java.nio.file.Paths;
+import java.util.Locale;
 import java.util.Iterator;
 import java.util.Map;
 import java.util.Map.Entry;
@@ -37,10 +38,10 @@ protected TronDatabase(String dbName) {
     this.dbName = dbName;
 
     if ("LEVELDB".equals(CommonParameter.getInstance().getStorage()
-        .getDbEngine().toUpperCase())) {
+        .getDbEngine().toUpperCase(Locale.ROOT))) {
       dbSource = new LevelDbDataSourceImpl(StorageUtils.getOutputDirectoryByDbName(dbName), dbName);
     } else if ("ROCKSDB".equals(CommonParameter.getInstance()
-        .getStorage().getDbEngine().toUpperCase())) {
+        .getStorage().getDbEngine().toUpperCase(Locale.ROOT))) {
       String parentName = Paths.get(StorageUtils.getOutputDirectoryByDbName(dbName),
           CommonParameter.getInstance().getStorage().getDbDirectory()).toString();
       dbSource = new RocksDbDataSourceImpl(parentName, dbName);

chainbase/src/main/java/org/tron/core/db/TronStoreWithRevoking.java

@@ -5,6 +5,7 @@
 import com.google.common.collect.Streams;
 import com.google.common.reflect.TypeToken;
 import java.io.IOException;
+import java.util.Locale;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.InvocationTargetException;
 import java.nio.file.Paths;
@@ -54,10 +55,10 @@ public abstract class TronStoreWithRevoking<T extends ProtoCapsule> implements I
 
   protected TronStoreWithRevoking(String dbName) {
     String dbEngine = CommonParameter.getInstance().getStorage().getDbEngine();
-    if ("LEVELDB".equals(dbEngine.toUpperCase())) {
+    if ("LEVELDB".equals(dbEngine.toUpperCase(Locale.ROOT))) {
       this.db =  new LevelDB(
           new LevelDbDataSourceImpl(StorageUtils.getOutputDirectoryByDbName(dbName), dbName));
-    } else if ("ROCKSDB".equals(dbEngine.toUpperCase())) {
+    } else if ("ROCKSDB".equals(dbEngine.toUpperCase(Locale.ROOT))) {
       String parentPath = Paths
           .get(StorageUtils.getOutputDirectoryByDbName(dbName), CommonParameter
               .getInstance().getStorage().getDbDirectory()).toString();

chainbase/src/main/java/org/tron/core/db2/common/TxCacheDB.java

@@ -20,6 +20,7 @@
 import java.nio.file.Paths;
 import java.nio.file.StandardOpenOption;
 import java.util.Iterator;
+import java.util.Locale;
 import java.util.Map;
 import java.util.Map.Entry;
 import java.util.Objects;
@@ -102,10 +103,10 @@ public TxCacheDB(String name, RecentTransactionStore recentTransactionStore,
     this.recentTransactionStore = recentTransactionStore;
     this.dynamicPropertiesStore = dynamicPropertiesStore;
     String dbEngine = CommonParameter.getInstance().getStorage().getDbEngine();
-    if ("LEVELDB".equals(dbEngine.toUpperCase())) {
+    if ("LEVELDB".equals(dbEngine.toUpperCase(Locale.ROOT))) {
       this.persistentStore = new LevelDB(
           new LevelDbDataSourceImpl(StorageUtils.getOutputDirectoryByDbName(name), name));
-    } else if ("ROCKSDB".equals(dbEngine.toUpperCase())) {
+    } else if ("ROCKSDB".equals(dbEngine.toUpperCase(Locale.ROOT))) {
       String parentPath = Paths
           .get(StorageUtils.getOutputDirectoryByDbName(name), CommonParameter
               .getInstance().getStorage().getDbDirectory()).toString();

chainbase/src/main/java/org/tron/core/store/AccountIdIndexStore.java

@@ -1,6 +1,8 @@
 package org.tron.core.store;
 
 import com.google.protobuf.ByteString;
+import java.util.Arrays;
+import java.util.Locale;
 import java.util.Objects;
 import org.apache.commons.lang3.ArrayUtils;
 import org.springframework.beans.factory.annotation.Autowired;
@@ -14,14 +16,30 @@
 @Component
 public class AccountIdIndexStore extends TronStoreWithRevoking<BytesCapsule> {
 
+  private static final Locale TURKISH = Locale.forLanguageTag("tr");
+
   @Autowired
   public AccountIdIndexStore(@Value("accountid-index") String dbName) {
     super(dbName);
   }
 
-  private static byte[] getLowerCaseAccountId(byte[] bsAccountId) {
+  public static byte[] getLowerCaseAccountId(byte[] bsAccountId) {
+    return ByteString
+        .copyFromUtf8(ByteString.copyFrom(bsAccountId).toStringUtf8().toLowerCase(Locale.ROOT))
+        .toByteArray();
+  }
+
+  /**
+   * Compute the legacy Turkish-locale lower-case key.
+   * On pre-fix tr/az nodes, 'I' (U+0049) was folded to 'ı' (U+0131).
+   * We use an explicit Turkish locale so that ALL nodes (not just tr/az)
+   * can probe for legacy keys written by former tr/az nodes.
+   */
+  @SuppressWarnings("StringCaseLocaleUsage")
+  private static byte[] getTurkishLowerCaseAccountId(byte[] bsAccountId) {
     return ByteString
-        .copyFromUtf8(ByteString.copyFrom(bsAccountId).toStringUtf8().toLowerCase()).toByteArray();
+        .copyFromUtf8(ByteString.copyFrom(bsAccountId).toStringUtf8().toLowerCase(TURKISH))
+        .toByteArray();
   }
 
   public void put(AccountCapsule accountCapsule) {
@@ -41,6 +59,9 @@ public byte[] get(ByteString name) {
   public BytesCapsule get(byte[] key) {
     byte[] lowerCaseKey = getLowerCaseAccountId(key);
     byte[] value = revokingDB.getUnchecked(lowerCaseKey);
+    if (ArrayUtils.isEmpty(value)) {
+      value = probeTurkishLegacyKey(key, lowerCaseKey);
+    }
     if (ArrayUtils.isEmpty(value)) {
       return null;
     }
@@ -51,7 +72,41 @@ public BytesCapsule get(byte[] key) {
   public boolean has(byte[] key) {
     byte[] lowerCaseKey = getLowerCaseAccountId(key);
     byte[] value = revokingDB.getUnchecked(lowerCaseKey);
+    if (ArrayUtils.isEmpty(value)) {
+      value = probeTurkishLegacyKey(key, lowerCaseKey);
+    }
     return !ArrayUtils.isEmpty(value);
   }
 
-}
+  /**
+   * Probe for a legacy key that may have been written by a tr/az locale node.
+   *
+   * <p>The input {@code key} might be in any case. To find a legacy entry we need
+   * to reconstruct the key that a tr/az node would have stored. Since Turkish
+   * toLowerCase only differs for UPPERCASE 'I' → 'ı', we first uppercase the
+   * input with Locale.ROOT (so any 'i' becomes 'I'), then lowercase with
+   * Turkish locale (so 'I' → 'ı'), producing the legacy key regardless of the
+   * original case of the input.</p>
+   */
+  private byte[] probeTurkishLegacyKey(byte[] key, byte[] standardLowerKey) {
+    // Direct Turkish lower-case of the original input
+    byte[] turkishKey = getTurkishLowerCaseAccountId(key);
+    if (!Arrays.equals(standardLowerKey, turkishKey)) {
+      byte[] value = revokingDB.getUnchecked(turkishKey);
+      if (!ArrayUtils.isEmpty(value)) {
+        return value;
+      }
+    }
+    // Input may already be lowercase ('i'), which Turkish toLowerCase won't change.
+    // Uppercase first with ROOT ('i' → 'I'), then Turkish lowercase ('I' → 'ı').
+    String upperStr = ByteString.copyFrom(key).toStringUtf8().toUpperCase(Locale.ROOT);
+    byte[] turkishFromUpper = ByteString
+        .copyFromUtf8(upperStr.toLowerCase(TURKISH)).toByteArray();
+    if (!Arrays.equals(standardLowerKey, turkishFromUpper)
+        && !Arrays.equals(turkishKey, turkishFromUpper)) {
+      return revokingDB.getUnchecked(turkishFromUpper);
+    }
+    return null;
+  }
+
+}

common/src/main/java/org/tron/common/args/Account.java

@@ -17,6 +17,7 @@
 
 import com.google.protobuf.ByteString;
 import java.io.Serializable;
+import java.util.Locale;
 import lombok.Getter;
 import org.apache.commons.lang3.StringUtils;
 import org.tron.common.utils.ByteArray;
@@ -120,7 +121,7 @@ public boolean isAccountType(final String accountType) {
       return false;
     }
 
-    switch (accountType.toUpperCase()) {
+    switch (accountType.toUpperCase(Locale.ROOT)) {
       case ACCOUNT_TYPE_NORMAL:
       case ACCOUNT_TYPE_ASSETISSUE:
       case ACCOUNT_TYPE_CONTRACT:
@@ -138,7 +139,7 @@ public AccountType getAccountTypeByString(final String accountType) {
       throw new IllegalArgumentException("Account type error: Not a Normal/AssetIssue/Contract");
     }
 
-    switch (accountType.toUpperCase()) {
+    switch (accountType.toUpperCase(Locale.ROOT)) {
       case ACCOUNT_TYPE_NORMAL:
         return AccountType.Normal;
       case ACCOUNT_TYPE_ASSETISSUE:

common/src/main/java/org/tron/common/runtime/vm/DataWord.java

@@ -23,6 +23,7 @@
 import com.fasterxml.jackson.annotation.JsonCreator;
 import com.fasterxml.jackson.annotation.JsonValue;
 import java.math.BigInteger;
+import java.util.Locale;
 import java.nio.ByteBuffer;
 import org.bouncycastle.util.Arrays;
 import org.bouncycastle.util.encoders.Hex;
@@ -121,7 +122,7 @@ public static boolean isZero(byte[] data) {
 
   public static String shortHex(byte[] data) {
     byte[] bytes = ByteUtil.stripLeadingZeroes(data);
-    String hexValue = Hex.toHexString(bytes).toUpperCase();
+    String hexValue = Hex.toHexString(bytes).toUpperCase(Locale.ROOT);
     return "0x" + hexValue.replaceFirst("^0+(?!$)", "");
   }
 
@@ -451,7 +452,7 @@ public String toPrefixString() {
   }
 
   public String shortHex() {
-    String hexValue = Hex.toHexString(getNoLeadZeroesData()).toUpperCase();
+    String hexValue = Hex.toHexString(getNoLeadZeroesData()).toUpperCase(Locale.ROOT);
     return "0x" + hexValue.replaceFirst("^0+(?!$)", "");
   }
 

framework/src/main/java/org/tron/core/Wallet.java

@@ -57,6 +57,7 @@
 import java.util.HashMap;
 import java.util.Iterator;
 import java.util.List;
+import java.util.Locale;
 import java.util.Map;
 import java.util.Map.Entry;
 import java.util.Objects;
@@ -3880,14 +3881,14 @@ private int getShieldedTRC20LogType(TransactionInfo.Log log, byte[] contractAddr
         for (String topic : topicsList) {
           byte[] topicHash = Hash.sha3(ByteArray.fromString(topic));
           if (Arrays.equals(topicsBytes, topicHash)) {
-            if (topic.toLowerCase().contains("mint")) {
+            if (topic.toLowerCase(Locale.ROOT).contains("mint")) {
               return 1;
-            } else if (topic.toLowerCase().contains("transfer")) {
+            } else if (topic.toLowerCase(Locale.ROOT).contains("transfer")) {
               return 2;
-            } else if (topic.toLowerCase().contains("burn")) {
-              if (topic.toLowerCase().contains("leaf")) {
+            } else if (topic.toLowerCase(Locale.ROOT).contains("burn")) {
+              if (topic.toLowerCase(Locale.ROOT).contains("leaf")) {
                 return 3;
-              } else if (topic.toLowerCase().contains("token")) {
+              } else if (topic.toLowerCase(Locale.ROOT).contains("token")) {
                 return 4;
               }
             }

framework/src/main/java/org/tron/core/config/args/Args.java

@@ -35,6 +35,7 @@
 import java.util.HashSet;
 import java.util.LinkedHashMap;
 import java.util.List;
+import java.util.Locale;
 import java.util.Map;
 import java.util.Objects;
 import java.util.Optional;
@@ -892,7 +893,7 @@ public static void applyConfigParams(
     PARAMETER.disabledApiList =
         config.hasPath(ConfigKey.NODE_DISABLED_API_LIST)
             ? config.getStringList(ConfigKey.NODE_DISABLED_API_LIST)
-            .stream().map(String::toLowerCase).collect(Collectors.toList())
+            .stream().map(s -> s.toLowerCase(Locale.ROOT)).collect(Collectors.toList())
             : Collections.emptyList();
 
     if (config.hasPath(ConfigKey.NODE_SHUTDOWN_BLOCK_TIME)) {
@@ -1770,7 +1771,7 @@ public static void printHelp(JCommander jCommander) {
     Map<String, String[]> groupOptionListMap = Args.getOptionGroup();
     for (Map.Entry<String, String[]> entry : groupOptionListMap.entrySet()) {
       String group = entry.getKey();
-      helpStr.append(String.format("%n%s OPTIONS:%n", group.toUpperCase()));
+      helpStr.append(String.format("%n%s OPTIONS:%n", group.toUpperCase(Locale.ROOT)));
       int optionMaxLength = Arrays.stream(entry.getValue()).mapToInt(p -> {
         ParameterDescription tmpParameterDescription = stringParameterDescriptionMap.get(p);
         if (tmpParameterDescription == null) {
@@ -1810,7 +1811,7 @@ public static String upperFirst(String name) {
     if (name.length() <= 1) {
       return name;
     }
-    name = name.substring(0, 1).toUpperCase() + name.substring(1);
+    name = name.substring(0, 1).toUpperCase(Locale.ROOT) + name.substring(1);
     return name;
   }