AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 21 Bitcoin

bookkeeper: fix reloading of rebalances.

Public commit record

What the developer wrote

Authored by Rusty Russell

68/100 · Adequate
bookkeeper: fix reloading of rebalances.

Parse key correctly.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Changelog-Fixed: bookkeeper: failed reload of rebalances on restart.
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit fixes a simple off-by-one bug in the bookkeeper plugin. When restarting, the plugin reloads saved 'rebalance' records from its database. The code was reading the wrong part of the database key, so it could not split the two stored numbers apart and would log a 'weird' error and skip the record. The fix changes one number so it reads the correct key segment. A previously-failing test is now enabled. There is no direct security exploit here; the main risk is that accounting records could be missing or inconsistent after a restart.

Recommended action

No immediate security action required. This is a correctness fix for internal accounting. Operators relying on bookkeeper rebalance records should ensure they upgrade so restart reloads rebalances correctly. Reviewers may want to confirm no other key offsets in the same file use the same off-by-one pattern.

Security signals we found

01

Off-by-one parsing error in database key deserialization

02

Potential accounting/reconciliation inconsistency on node restart

03

Test previously marked as expected failure now enabled

Risk score

Why this scored 21/100

Our methodology →
Potential impact 4/30
Exploitability 0/25
Stealth signal 2/15
Affected reach 3/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.