private broadcast: add release note for limited cap
What the developer wrote
Authored by Gregory Sanders
private broadcast: add release note for limited cap
What changed, and why it matters
This commit only adds a release note describing a previously implemented limit on a transaction queue. It does not change any code behavior, so it has no direct security impact on its own. The note tells users that a privacy-related transaction queue now holds at most 10,000 entries and that callers must manage it if it fills up.
No action needed for this documentation-only commit. Review the referenced PR #35406 separately if assessing the security of the actual queue cap implementation.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit creates doc/release-notes-35406.md, an 8-line release note for pull request #35406. It documents that the private-broadcast queue (used for transactions submitted via sendrawtransaction while -privatebroadcast is active and before they are echoed back from the network) is capped at 10,000 entries, with new submissions rejected when full. It references getprivatebroadcastinfo and abortprivatebroadcast as caller tools. No source code is modified.
Changed components
doc/release-notes-35406.mdInspect captured patch +8 / −0
diff --git a/doc/release-notes-35406.md b/doc/release-notes-35406.md
new file mode 100644
index 00000000..178a0791
--- /dev/null
+++ b/doc/release-notes-35406.md
@@ -0,0 +1,8 @@
+P2P and network changes
+-----------------------
+
+- The private-broadcast queue (transactions submitted via `sendrawtransaction`
+when `-privatebroadcast` is enabled and not yet echoed back from the network)
+is now capped at 10,000 entries. When full, new submissions are rejected. It is
+up to the caller to inspect the queue via `getprivatebroadcastinfo` and free
+up space when stuck via `abortprivatebroadcast`. (#35406)
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.