AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 11 Bitcoin

askrene: remove non child-friendly fields from struct route_query.

Public commit record

What the developer wrote

Authored by Rusty Russell

73/100 · Adequate
askrene: remove non child-friendly fields from struct route_query.

Notably no access to the struct command and struct plugin.

Note: we actually *do* mess with askrene->reserves, but the previous code
used cmd to get to it. Now we need to include a non-const pointer in
struct route_query.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This is a code cleanup change in Core Lightning's routing plugin (askrene). It removes direct access to the command and plugin objects from an internal data structure used during route calculations, passing only the specific pieces of information the child process needs instead. This is a defensive design improvement, not a fix for an active security bug.

Recommended action

No immediate action required. Treat as routine hardening/refactoring. Reviewers may want to confirm that the new non-const rq->reserved pointer is properly restored/undone on all error paths, as noted in the commit message.

Security signals we found

01

Reduction of privileged object exposure to forked child process

02

Replacement of plugin_err with abort in child error path

03

Defensive refactoring to limit struct route_query capabilities

Risk score

Why this scored 11/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 0/15
Confidence 8/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.