AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 17 Bitcoin

gossip_store: add UUID entry at front of the store.

Public commit record

What the developer wrote

Authored by Rusty Russell

73/100 · Adequate
gossip_store: add UUID entry at front of the store.

We also put this in the store_ended message, too: so you can
tell if the equivalent_offset there really refers to this new
entry (or if two or more rewrites have happened).

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit changes how Core Lightning stores and tracks its internal gossip data file. It adds a unique identifier (UUID) to the front of the gossip store and includes that UUID in a 'store ended' marker so the node can tell when the file has been rewritten. The change is a normal data-format update, not a fix for an active security bug. There is one placeholder note in the code saying 'FIXME: real uuid!' which means the UUID is currently all zeros, but that is a completeness issue rather than an exploitable flaw.

Recommended action

Treat as a routine protocol/data-format evolution. If deploying from this commit, note that the zero-UUID placeholder is incomplete and should be replaced with a real random UUID before relying on the new disambiguation feature. No emergency security action is indicated by the diff itself.

Security signals we found

01

New on-disk wire format version bump (15 -> 16)

02

New gossip_store_uuid message type added to wire protocol

03

Existing gossip_store_ended message extended with 32-byte uuid field

04

Hard-coded zero UUID placeholder with FIXME comment in gossip_store.c

05

Downgrade tooling metadata updated for v25.12

Risk score

Why this scored 17/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 2/15
Confidence 8/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.