AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

graph/db: parameterize forEachChanInSCIDList with gossip version

Public commit record

What the developer wrote

Authored by Elle Mouton

73/100 · Adequate
graph/db: parameterize forEachChanInSCIDList with gossip version

Replace the hardcoded GossipVersion1 in forEachChanInSCIDList with an
explicit version parameter so the helper can be used for v2 channel
lookups. The caller in FilterKnownChanIDs now passes the version
through.
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This is a small internal code cleanup in LND's channel graph database code. It replaces a hardcoded gossip version number with a parameter so the same helper function can be reused for both old and new channel gossip formats. The only visible behavior change is that zombie-channel checks now use the version carried in each channel's own metadata rather than always assuming the old version. There is no obvious security vulnerability here; it looks like a correctness/refactoring change.

Recommended action

Treat as a normal refactoring/correctness commit. Review the full PR context to confirm that all callers of forEachChanInSCIDList pass a sensible gossip version and that chanInfo.Version is validated before reaching the database. No immediate security action is indicated by this diff alone.

Security signals we found

01

Hardcoded protocol version replaced by parameterized version

02

Database query version field now derived from caller-supplied channel metadata

03

No input validation changes visible in the diff

04

No mention of security, vulnerability, CVE, or bug bounty in commit message

Risk score

Why this scored 19/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 3/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.