Skip to content

lnwire: limit channel update reader#7262

Merged
Roasbeef merged 1 commit intolightningnetwork:masterfrom
bottlepay:fix-failure-tlv
Jan 5, 2023
Merged

lnwire: limit channel update reader#7262
Roasbeef merged 1 commit intolightningnetwork:masterfrom
bottlepay:fix-failure-tlv

Conversation

@joostjager
Copy link
Contributor

@joostjager joostjager commented Dec 19, 2022

Fixes a bug where channel update data is read until the end of the stream rather than stopping after the specified length. This is problematic when failure message tlv data is present, because this data is interpreted as channel update tlv data. The extra data isn't covered by the channel update signature, and the channel update is discarded.

Thanks to @t-bast for pointing this out.

Copy link
Collaborator

@morehouse morehouse left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@lightninglabs-deploy
Copy link
Collaborator

@guggero: review reminder

Copy link
Collaborator

@guggero guggero left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice, LGTM 🎉

Fixes a bug where channel update data is read until the end of the stream
rather than stopping after the specified length. This is problematic
when failure message tlv data is present, because this data is interpreted
as channel update tlv data.
@joostjager
Copy link
Contributor Author

Rebased

Copy link
Member

@Roasbeef Roasbeef left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🌙

@Roasbeef Roasbeef added this to the v0.16.0 milestone Jan 5, 2023
@Roasbeef Roasbeef merged commit e29a5a5 into lightningnetwork:master Jan 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

No open projects
Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

5 participants