What the developer wrote
Authored by Calvin Kim
main: use btcutil.InterfaceAddr
We use this as the net.InterfaceAddr is broken from android 11.
What changed, and why it matters
This is a tiny one-line change that swaps the standard Go network function for a custom btcd utility function when discovering local network addresses. The stated reason is that the standard function does not work correctly on Android 11, so this is a compatibility/portability fix rather than a security patch. There is no direct evidence in the commit of a vulnerability being fixed.
Review the implementation of btcutil.InterfaceAddrs to confirm it does not introduce new behavior that could leak unintended addresses or fail open on error. Treat as a routine compatibility patch unless additional context emerges.
Security signals we found
Single-line API swap with no visible security hardening
Commit message frames change as Android 11 compatibility fix, not security fix
No references to CVE, advisory, researcher, or security issue in commit or supplied materials
Evidence from the diff
The commit replaces net.InterfaceAddrs() with btcutil.InterfaceAddrs() in server.go’s addLocalAddress(). The custom helper is described as a workaround because net.InterfaceAddrs is broken on Android 11. The change affects how btcd enumerates local interface addresses when bound to an unspecified address, but the diff itself does not show any input validation, bounds checking, or cryptographic change. Without inspecting btcutil.InterfaceAddrs, we cannot confirm whether it addresses any underlying security issue in the standard library call.
Changed components
btcd server.go addLocalAddress() local address enumerationInspect captured patch +1 / −1
diff --git a/server.go b/server.go
index 33f548c..6845792 100644
--- a/server.go
+++ b/server.go
@@ -3360,7 +3360,7 @@ func addLocalAddress(addrMgr *addrmgr.AddrManager, addr string, services wire.Se
if ip := net.ParseIP(host); ip != nil && ip.IsUnspecified() {
// If bound to unspecified address, advertise all local interfaces
- addrs, err := net.InterfaceAddrs()
+ addrs, err := btcutil.InterfaceAddrs()
if err != nil {
return err
}
Why this scored 21/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.