j-berman and such-gitea
2687f95798
blockchain: if block is known invalid, fail block verification
...
(cherry picked from commit 9044450974d5b9fe228f746d2f580e83e58ddec0)
2026-10-04 18:50:23 -04:00
j-berman and such-gitea
1a4dd0f212
p2p: update peer's height on new block & widen window for relay
...
- We select peers to relay to based on their latest known sync height.
- This change:
A) makes sure to update the peer's latest known sync height upon
validating the peer's newly relayed blocks.
B) Allows for a wider window so that if we haven't yet received the
peer's block or finished validating it, then the peer can still be
a valid candidate to receive our new txs.
(cherry picked from commit 437c45bebd621b1fdbcf0b19a4437d002b51ef8e)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
444eb4dd79
lmdb: make transaction admission reentrant
...
(cherry picked from commit 6ee665b2c228dde4bb576f0ed7edb8d1a1702673)
2026-10-04 18:50:23 -04:00
Thomas and such-gitea
c9d51bd08a
wallet_rpc_server: reject --password with --wallet-dir
...
(cherry picked from commit 587315ce94c8c3f656ce3bbb5e046e4aa96942d4)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
cb4f6abd06
wallet_api: preserve output metadata in view-only wallet exports
...
(cherry picked from commit c5160732570cb4e07be29de1905324389df79978)
2026-10-04 18:50:23 -04:00
koe and such-gitea
f4212ace98
add sanity_check_pending_tx
...
(cherry picked from commit 4eae9740460fb69e30bedeea48c2ab3268974bc0)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
f14082fdbd
rpc: reject deep block submissions on restricted RPC
...
(cherry picked from commit 837c59bed10d06956ca7375a0e91619c0b77142e)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
01a7c14a82
epee: prevent log injection from malformed HTTP headers
...
(cherry picked from commit 281c1d41aae7b579fa1307d82622e18abcd038ff)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
fb0d7b2318
wallet_api: expose signed message verification details
...
(cherry picked from commit 525a6f0b6e1bf53a048ef5d61823bf0043a2f130)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
52b4aaef3b
lmdb: retain percentage fallback for batch resizing
...
(cherry picked from commit c8d926c6995448a2a8efe6faf5f906eecdacab11)
2026-10-04 18:50:23 -04:00
tobtoht and such-gitea
129ee71995
depends: openssl: update to 3.0.22
...
(cherry picked from commit 91c32b55c27e2a2202639c50d60c55d7472efaef)
2026-10-04 18:50:23 -04:00
woodser and such-gitea
5fe3caa4d9
wallet2: abort in-flight daemon request on shutdown
...
(cherry picked from commit 3c0980f5991a3cc27f7b3890cb68251c971a4b07)
2026-10-04 18:50:23 -04:00
Thomas and such-gitea
818a0067b6
wallet2: fix data races in refresh error handlers
...
(cherry picked from commit d9236332a59bb090b0fa74e808237c26189564b0)
2026-10-04 18:50:23 -04:00
woodser and such-gitea
0309d199f4
wallet_rpc_server: stop refresh on shutdown
...
(cherry picked from commit 8379bdfa29ec91fa9c1d3b1492a6de6cb143a007)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
9f5c144a44
lmdb: refine batch size estimation
...
(cherry picked from commit a34ed83e7290198c5e54e71d6592aef55fa47eae)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
16f7dfef75
epee: prevent JSON parser log injection
...
(cherry picked from commit 1b82d32a2f18efde834531a1be28b0f711a495e6)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
552aea4a7d
wallet2: fix task lifetime during parsed block processing
...
(cherry picked from commit a09eb5cf4aefa6c351acf898ad4e3be4a67ad860)
2026-10-04 18:50:23 -04:00
selsta and such-gitea
81d781a965
wallet2: validate key image domain in reserve proofs
...
Reported by zkao, a tool by zkSecurity
(cherry picked from commit 1bb17925fdff1494ec8f7a127c9c6cd814c36e69)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
281652a673
p2p: use connection state to detect duplicate handshakes
...
(cherry picked from commit 57068111aa0dd1e6816d598d1fedb21e2f8cf6c6)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
4dd27f20a3
rpc: redact txpool age in restricted mode
...
(cherry picked from commit b4c8385fd382f14419e54c6f1c3800a1642360fd)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
baed767de1
txpool: fix time_in_pool age calculation
...
(cherry picked from commit 18269ab571f1664eaa05640ae6eaae191de4e03d)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
741d3ec47b
protocol: flush rejected block spans from disconnected peers
...
(cherry picked from commit dfa2d3020be5cc6dcd4a525bc1b7a315b9e83f57)
2026-10-04 18:50:22 -04:00
woodser and such-gitea
46c1ad8d7a
wallet2: return concrete low priority when adjust_priority fails
...
(cherry picked from commit fbd80b3caba677bca3e5176122d45f758dc6ce18)
2026-10-04 18:50:22 -04:00
Samy and such-gitea
aee1ca831e
wallet_rpc_server: add weight to describe_transfer
...
(cherry picked from commit 017f3cf6b5e548859914a13a0a9ec184597d278d)
2026-10-04 18:50:22 -04:00
woodser and such-gitea
cafc099d04
checkpoints: exclude equal height in get_nearest_checkpoint_height
...
(cherry picked from commit 37202dfc5220bfb75eea472cfcebc87a87d78ef3)
2026-10-04 18:50:22 -04:00
woodser and such-gitea
a1553381a2
wallet2: keep multisig import state consistent across failed refreshes
...
(cherry picked from commit b2cd62754bfb837bad2a49ea5b3808f35bb6a16c)
2026-10-04 18:50:22 -04:00
woodser and such-gitea
10ade8c591
wallet2: honor max_blocks bound during fast_refresh hash pulls
...
(cherry picked from commit bbd6350751876f24ad21eb70cbfb12670659e927)
2026-10-04 18:50:22 -04:00
j-berman and such-gitea
f2a8c47410
p2p: use a bool for send()
...
Identified by @selsta
Callers can otherwise misinterpret int -1 as truthy success,
e.g. see make_payload_send_txs
(cherry picked from commit 9bf193728bb11beb9c40e06a0d48d1c697fe7a84)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
a04ff495f7
wallet_api: reject transaction file signing with hardware wallets
...
Reported by zkao, a tool by zkSecurity
(cherry picked from commit 735e535adf2c3d7d4c159478747c144e2aea6a69)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
809a263e11
rpc: hide sensitive txs from restricted block templates
...
(cherry picked from commit 1d45021cd0e452b60846b458701e612ab01db5c7)
2026-10-04 18:50:22 -04:00
woodser and such-gitea
a296ceb08b
device: implement default device locking
...
(cherry picked from commit cf9349e74a19458c2dd5b419c732dfcd5e7936bb)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
f26ac02df9
p2p, rpc: group public IPv6 connection limits by /64
...
(cherry picked from commit f277d328cf1f7e64423b5eb7dc0e21649f71e47a)
2026-10-04 18:50:22 -04:00
Masamune and such-gitea
881dcfbd43
Blockchain: fix data race in get_dynamic_base_fee_estimate
...
(cherry picked from commit 7368e166feef49be38dd96af309ac4746bbfe2b7)
2026-10-04 18:50:22 -04:00
Lee Clagett and such-gitea
e4d52af5c7
Fix stall issues with p2p
...
(cherry picked from commit f618ee1136fa11d0611229a81d9c2838cc9db737)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
51012bfc4d
device_trezor: validate bridge response size before parsing
...
(cherry picked from commit 635a558a3f27f0c4098936da033fa687d5220cfe)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
af216147b0
p2p: stop buffered dispatch after fatal notifications
...
(cherry picked from commit f397f3920998aa8f57f86c9539fd720d288c7e18)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
333e916fbc
rpc: disable get_transaction_pool in restricted mode
...
(cherry picked from commit af88effd9a82ca715c12ce6ea021fdbc1cbb3102)
2026-10-04 18:50:22 -04:00
waris ) and such-gitea
b1f879a7a3
wallet: derive encrypted payment ID dummy/real status from tx.extra, not cd.dests
...
Also applies the same payment ID display fix to on_describe_transfer in wallet_rpc_server.cpp.
(cherry picked from commit 3bc997cb3a1eb7dfe57dab302a8309e1ead22fac)
2026-10-04 18:50:22 -04:00
selsta and such-gitea
2ea94e6a21
rpc: hide ZMQ request contents in restricted mode
...
(cherry picked from commit dfb85dde03650430fa77541af17831f4bb9c5a2c)
2026-10-04 18:50:22 -04:00
tobtoht and such-gitea
27b67006cd
depends: unbound: update to 1.25.2
...
(cherry picked from commit 2a10eceae0f34c350107876e1d4c9a6314e69d27)
2026-10-04 18:50:22 -04:00
weifanglab and such-gitea
16ad3eaea8
epee: fix build with openssl 4.0
...
(cherry picked from commit 0b67da411a5c0baf2f0631b311a3ec71467da1bc)
2026-10-04 18:50:22 -04:00
SChernykh and such-gitea
ad119391eb
Optimize hashing of generic types
...
Use a proper hash function instead of f(x)=x to achieve better distribution of hash values
(cherry picked from commit 5eeff1d9c15dfdce6ade9bed455e8fdaab777b31)
2026-10-04 18:50:21 -04:00
selsta and such-gitea
1ead51defe
rpc: recover from oversized ZMQ requests
...
(cherry picked from commit d1508916b44d08fa18dc8ac74e04e9f92dbfb2c1)
2026-10-04 18:50:21 -04:00
woodser and such-gitea
b86d88f19b
wallet_rpc_server: refresh immediately when auto_refresh is enabled
...
(cherry picked from commit 7f8d72373acb371d44a6d9bcd5de78eda31118c4)
2026-10-04 18:50:21 -04:00
SChernykh and such-gitea
fb09d61f06
Fix TryAcquireSRWLockShared being implicitly defined and causing UB
...
(cherry picked from commit 342c3a0fd42584385c76743bb165ff6a75584c1e)
2026-10-04 18:50:21 -04:00
selsta and such-gitea
131a340a51
wallet2: bounds check additional derivations in is_out_to_acc
...
(cherry picked from commit 987a2a77d3e4b4d3781e70bc70031ff254313557)
2026-10-04 18:50:21 -04:00
selsta and such-gitea
74d32f0a0f
simplewallet: validate get_outs response size
...
(cherry picked from commit f9f6471b1ed431d638e40c60601bc61aa16f1092)
2026-10-04 18:50:21 -04:00
selsta and such-gitea
0abf7825ea
blockchain_prune: use per-table LMDB stats for resize estimation
...
Use mdb_stat on the active table instead of environment-wide
statistics when estimating copy size. This prevents resizing
decisions from being based on the wrong database.
(cherry picked from commit 8301f936f7e9ce33aeadeee46a6b1de1212f3fdc)
2026-10-04 18:50:21 -04:00
selsta and such-gitea
2084879447
wallet2: validate cached transfer indices
...
Reported by hacksandhops
(cherry picked from commit 72d91039eb5c67c7912ef8328299e8e28d9effb0)
2026-10-04 18:50:21 -04:00
selsta and such-gitea
255134738b
crypto: fix ARMv8 slow-hash inline assembly constraints
...
(cherry picked from commit 246d76f4fc0aefd3ca570fb00f003d58719c5aa6)
2026-10-04 18:50:21 -04:00