Skip to content

merge release/28.0.1-internal to master - #5440

Merged
graydon merged 6 commits into
masterfrom
release/28.0.1-internal
Sep 2, 2026
Merged

graydon merged 6 commits into
masterfrom
release/28.0.1-internal

Conversation

@graydon

@graydon graydon commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Merge release/28.0.1-internal to master

graydon and others added 6 commits August 12, 2026 20:56
Resolves #704.

This PR clamps the results of `ApplicableTxSetFrame::getTotalFees` and
`ApplicableTxSetGrame::getTotalInclusionFees` to `INT64_MAX` so that
these functions do not overflow. The only caller of these functions is
`compareTxSets`, and the only caller of that function is
`HerderSCPDriver::combineCandidates`. I think this is why #704 ascribes
the bug to `combineCandidates`, but I'd argue it's lower down in these
fee summing functions.

I've verified that this fixes the PoC in #704. The unit test I added is
much more targeted; it focuses on the underlying functions themselves.
Skip background tx sig verification for unauthenticated peers
Clamp additions in tx set fee summing functions
Copilot AI balanced review requested due to automatic review settings September 1, 2026 07:03

This comment was marked as resolved.

@graydon
graydon enabled auto-merge September 2, 2026 20:26
@anupsdf
anupsdf requested a review from bboston7 September 2, 2026 20:44
@graydon
graydon added this pull request to the merge queue Sep 2, 2026
Merged via the queue into master with commit 2913af6 Sep 2, 2026
58 of 61 checks passed
@graydon
graydon deleted the release/28.0.1-internal branch September 2, 2026 22:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants