docs: update release notes for gossip trickle delay validation
What changed, and why it matters
This commit only updates the release notes document to describe a previously fixed bug. The actual code fix (adding validation for the TrickleDelay setting to prevent a panic) is in a different pull request referenced by the notes. By itself, this documentation change does not alter any running software or introduce any security risk.
No action needed for this documentation commit. Review PR #10463 separately if you want to assess the actual TrickleDelay validation fix.
Security signals we found
Release notes mention a prior panic fix in the gossiper
Referenced PR #10463 addresses configuration validation for TrickleDelay
No functional code changes in this commit
Evidence from the diff
The diff adds a bullet to docs/release-notes/release-notes-0.21.0.md describing PR #10463, which fixed a panic in LND’s gossiper when TrickleDelay was zero or negative. The commit is purely editorial: it documents that the configuration is now validated at startup and defaulted to 1 ms if invalid, preventing time.NewTicker from panicking. No source code is changed.
Changed components
docs/release-notes/release-notes-0.21.0.mdInspect captured patch +7 / −1
diff --git a/docs/release-notes/release-notes-0.21.0.md b/docs/release-notes/release-notes-0.21.0.md
index 5c8360b..8921139 100644
--- a/docs/release-notes/release-notes-0.21.0.md
+++ b/docs/release-notes/release-notes-0.21.0.md
@@ -57,6 +57,12 @@
transactions as locally initiated, even when they were initiated by the remote
peer.
+- [Fixed a panic in the gossiper](https://github.com/lightningnetwork/lnd/pull/10463)
+ when `TrickleDelay` is configured with a non-positive value. The configuration
+ validation now checks `TrickleDelay` at startup and defaults it to 1
+ millisecond if set to zero or a negative value, preventing `time.NewTicker`
+ from panicking.
+
# New Features
- Basic Support for [onion messaging forwarding](https://github.com/lightningnetwork/lnd/pull/9868)
@@ -141,7 +147,7 @@
## Testing
-* [Added unit tests for TLV length validation across multiple packages](https://github.com/lightningnetwork/lnd/pull/10249).
+* [Added unit tests for TLV length validation across multiple packages](https://github.com/lightningnetwork/lnd/pull/10249).
New tests ensure that fixed-size TLV decoders reject malformed records with
invalid lengths, including roundtrip tests for Fee, Musig2Nonce,
ShortChannelID and Vertex records.
Why this scored 17/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.