AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 29 Bitcoin

Squashed 'src/ipc/libmultiprocess/' changes from 1b8d4a6f1e54..13424cf2ecc1

Public commit record

What the developer wrote

Authored by Ryan Ofsky

81/100 · Strong
Squashed 'src/ipc/libmultiprocess/' changes from 1b8d4a6f1e54..13424cf2ecc1

13424cf2ecc1 Merge bitcoin-core/libmultiprocess#205: cmake: check for Cap'n Proto / Clang / C++20 incompatibility
72dce118649b Merge bitcoin-core/libmultiprocess#200: event loop: add LogOptions struct and reduce the log size
85003409f964 eventloop: add `LogOptions` struct
657d80622f81 cmake: capnproto pkg missing helpful error
d314057775a5 cmake: check for Cap'n Proto / Clang / C++20 incompatibility
878e84dc3030 Merge bitcoin-core/libmultiprocess#203: cmake: search capnproto in package mode only
1a85da5873c2 Merge bitcoin-core/libmultiprocess#202: doc: correct the build instructions for the example
df01873e1ecb Merge bitcoin-core/libmultiprocess#197: ci: Add freebsd and macos build
3bee07ab3367 cmake: search capnproto in package mode only
b6d3dc44194c doc: correct the build instructions for example
fa1ac3000055 ci: Add macos and freebsd task

git-subtree-dir: src/ipc/libmultiprocess
git-subtree-split: 13424cf2ecc1e5eadc85556cf1f4c65e915f702a
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit updates the libmultiprocess subtree used by Bitcoin Core. The most notable change is a build-time check that refuses to compile with older, vulnerable versions of the Cap'n Proto library (CVE-2022-46149) and with Cap'n Proto versions that are incompatible with Clang 16+ under C++20. It also adds FreeBSD and macOS CI jobs, fixes example build instructions, and reduces the maximum size of IPC debug log messages from 1000 to 200 characters via a new LogOptions struct.

Recommended action

Ensure Bitcoin Core builds with Cap'n Proto 1.0+ when ENABLE_IPC=ON, or disable multiprocess support with -DENABLE_IPC=OFF if an updated Cap'n Proto package is unavailable. Review downstream build logs for the new fatal error messages and update dependency documentation accordingly.

Security signals we found

01

Build system now blocks compilation against Cap'n Proto versions affected by CVE-2022-46149

02

Build system now blocks compilation against Cap'n Proto versions incompatible with Clang 16+ and C++20

03

References external CVE-2022-46149 and GitHub Security Advisory GHSA-qqff-4vw4-f6hx

04

Reduces IPC debug log message size limit from 1000 to 200 characters

05

Adds FreeBSD and macOS CI coverage

Risk score

Why this scored 29/100

Our methodology →
Potential impact 5/30
Exploitability 3/25
Stealth signal 4/15
Affected reach 6/15
Confidence 7/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.