AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 44 Bitcoin

gossip_store: wait for completed bit on reading.

Public commit record

What the developer wrote

Authored by Rusty Russell

60/100 · Adequate
gossip_store: wait for completed bit on reading.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
The short version

What changed, and why it matters

This commit hardens how Core Lightning reads its own 'gossip store' file so that it skips records that have not been fully written yet. Previously, readers could try to process half-written or incomplete records, which could lead to crashes, incorrect routing data, or corrupted state. The fix adds a 'wait for completed bit' check in C and Python gossip-map readers and in a diagnostic dump tool.

Recommended action

Treat as a defensive hardening patch. Review whether any other tools or plugins read the gossip store directly without checking the completed bit, and consider adding tests that simulate a partially written record to ensure readers stop cleanly.

Security signals we found

01

Incomplete-record guard added to low-level header read

02

Gossip map catch-up loop now breaks on incomplete records

03

Python gossmap reader rewound and returns None on incomplete records

04

Diagnostic tool now flags incomplete records explicitly

Risk score

Why this scored 44/100

Our methodology →
Potential impact 12/30
Exploitability 8/25
Stealth signal 7/15
Affected reach 8/15
Confidence 6/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.