Filtered chain view: unlock the filter mutex on transaction parse failure
Fixed in: Public fix committed 2026-05-04; first containing release not established
details
- Finding IDs
- F-DCRLND-CHAINVIEW-DEADLOCK-001
- Status
- fixed publicly
- Fixed in
- Public fix committed 2026-05-04; first containing release not established
- Recorded credit
- Public fix author: Jamie Holdstock. Public 1seal credit and a causal link to our report are not established.
- Note
- The patch releases filterMtx before returning from the failed transaction decode in onBlockConnected, matching the error path in the earlier report. Reaching this path requires malformed data from the configured dcrd backend. Arbitrary remote triggering, inevitable loss of funds and an officially accepted security report are not claimed.
F-DCRLND-CHAINVIEW-DEADLOCK-001: Resource limits. An error return with the filter mutex still held can stall later chain-view operations. Reviewed 7 Oct 2026. Mechanism assessed by 1seal.
Mechanism source for F-DCRLND-CHAINVIEW-DEADLOCK-001
Security area (1seal assessment): Availability. An error return with the filter mutex still held can stall later chain-view operations. Reviewed 7 Oct 2026.