Repository navigation

Refuse a loose RPC cookie, and land the 1062 hygiene follow-ups - #1074

Merged

reardencode merged 18 commits into

masterfrom

harden/cookie-and-audit

Oct 19, 2026

Merged

Refuse a loose RPC cookie, and land the 1062 hygiene follow-ups#1074
reardencode merged 18 commits into
masterfrom
harden/cookie-and-audit

Commits on Oct 18, 2026
- docs: record intentional fee, AEAD, and fuzz calls
  rearden-grok[bot]
  committed
  16b2d82
- rpc: refuse a cookie wider than --rpc-cookie-perms
  rearden-grok[bot]
  committed
  025ca67
- deps: deny duplicate crate versions in qc
  rearden-grok[bot]
  committed
  d031955
- build: compile mutants skips only on the nightly feature
  rearden-grok[bot]
  committed
  22fe328
- net: drop unroutable addresses from seeds and gossip
  rearden-grok[bot]
  committed
  66fba93
- net: cap remembered fork tips at 64
  rearden-grok[bot]
  committed
  3024eef
- fuzz: honor FUZZ_SANITIZER and add a Sunday UBSan run
  rearden-grok[bot]
  committed
  28217b3
- rpc: keep the cookie mode check Unix-only
  rearden-grok[bot]
  committed
  bf00661
- net: drop CGNAT, benchmark, reserved, and special IPv6 from gossip
  
  reardencode
  and
  cursoragent
  committed
  e0ae3b4
- net: keep unroutable clearnet out of steady-state gossip
  
  reardencode
  and
  cursoragent
  committed
  345087f
- rpc: cap cookie group and all at 0640 and 0644
  
  reardencode
  and
  cursoragent
  committed
  784c536
- net: drop 0/8 and 6to4 or NAT64 addresses that embed a bogon
  
  reardencode
  and
  cursoragent
  committed
  5b27597
- net: do not relay port-0 addresses except I2P
  
  reardencode
  and
  cursoragent
  committed
  2940ca7
- net: keep one slot per embedded IPv4, and drop Teredo and 3fff::/20
  
  reardencode
  and
  cursoragent
  committed
  c559249
- net: do not relay Tor v2 or CJDNS outside fc00::/8
  
  reardencode
  and
  cursoragent
  committed
  dda6212
- net: drop the IPv6 benchmarking prefix 2001:2::/48
  
  reardencode
  and
  cursoragent
  committed
  75daca8
Commits on Oct 19, 2026
- test: read the loopback dial failure from the peers file
  
  reardencode
  and
  cursoragent
  committed
  a2a3dd2
- test: accept a loopback --connect only in the peers file
  
  reardencode
  and
  cursoragent
  committed
  6710b9e

Commits

Commits on Oct 18, 2026

Commits on Oct 19, 2026