Accepted findings
55
7 unique; 48 shared
gpt-6-luna
Candidate rows can merge into one accepted finding. Publish is the verifier decision; accepted attribution is recorded separately.
| PR | Finding | Verifier decision | Attribution | Report |
|---|---|---|---|---|
| #34778 | `-loglevelalways` omits the category on Info, Warning, and Error linessrc/logging.cpp:359concurrency:1 | publish | Accepted, shared | report |
| #29491 | Batch checker treats every uncached Schnorr check as truesrc/script/sigcache.cpp:101concurrency:1 | drop | Not accepted | report |
| #10102 | CoinControl maximum depth is replaced by the minimum depth over IPCsrc/ipc/capnp/wallet.cpp:196concurrency:1 | publish | Accepted, shared | report |
| #30437 | Final tip comparison dereferences an empty optionalsrc/bitcoin-mine.cpp:159concurrency:1 | publish | Accepted, shared | report |
| #30437 | Failure to mine is reported using the wrong iteration countsrc/bitcoin-mine.cpp:164concurrency:2 | drop | Not accepted | report |
| #32387 | Failed Windows spawns leak sockets and process handlessrc/ipc/libmultiprocess/src/mp/util.cpp:447concurrency:1 | publish | Accepted, shared | report |
| #33117 | Progress callback may divide by zero for an empty snapshotsrc/validation.cpp:5847concurrency:1 | undisposed | Not accepted | report |
| #34038 | Re-enabling a category silently downgrades it from trace to debugsrc/logging.cpp:129concurrency:1 | drop | Not accepted | report |
| #34360 | Fake block index may be invalidated by vector growth before wallet notificationsrc/bench/wallet_bench_util.h:73concurrency:1 | drop | Not accepted | report |
| #36673 | Certificate check can silently succeed if OpenSSL parsing fails.github/workflows/code-signing-certificate.yml:39concurrency:1 | drop | Not accepted | report |
| #29491 | Reset drops the batch's fresh random seedsrc/secp256k1/src/modules/batch/main_impl.h:150concurrency:1 | drop | Not accepted | report |
| #35858 | Privacy guide omits the `-proxyrandomize` caveatdoc/privacy.md:25concurrency:1 | publish | Accepted, shared | report |
| #36677 | Only Linux receives the close-on-exec fopen modesrc/util/fs.cpp:30concurrency:1 | undisposed | Not accepted | report |
| #35071 | Checkpoint can be accepted when its file index is beyond the current file setsrc/node/blockstorage.cpp:1326concurrency:1 | drop | Not accepted | report |
| #36122 | PSBT combiner accepts conflicting half-aggregation signaturessrc/psbt.cpp:49concurrency:1 | drop | Not accepted | report |
| #36607 | Eviction removes the guard for transactions that have not propagatedsrc/private_broadcast.cpp:41concurrency:1 | publish | Accepted, shared | report |
| #35994 | Fix-it can drop assignments when annotations describe different field totalscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:146concurrency:1 | drop | Not accepted | report |
| #34400 | Reorging the wallet tip can leave parallel filter results unprocessedsrc/wallet/scan.cpp:397concurrency:1 | drop | Not accepted | report |
| #35558 | Use the platform's socket error code when TCP_INFO retrieval failssrc/util/sock.h:370concurrency:1 | drop | Not accepted | report |
| #35558 | Candidate count can exceed the transaction count and underflow the reserve sizesrc/blockencodings.cpp:26concurrency:2 | drop | Not accepted | report |
| #36434 | Connection errors can report an address `bitcoin-cli` did not trysrc/bitcoin-cli.cpp:1296concurrency:1 | publish | Accepted, shared | report |
| #35642 | Floating-point exponent conversion can overflow on accepted optimizer inputssrc/headerssync.cpp:460concurrency:1 | drop | Not accepted | report |
| #35511 | Explicit CAmount construction accepts unsigned values that wrapsrc/consensus/amount.h:36concurrency:1 | publish | Accepted, shared | report |
| #35387 | `loglevel all=trace` is rejected although trace is advertisedsrc/rpc/node.cpp:215concurrency:1 | drop | Not accepted | report |
| #35302 | sendall specific inputs skip the unknown-witness-version exclusionsrc/wallet/rpc/spend.cpp:1570concurrency:1 | drop | Not accepted | report |
| #34132 | A throwing read-error callback bypasses abort on LevelDB read failuressrc/dbwrapper.cpp:366concurrency:1 | drop | Not accepted | report |
| #35569 | Output-index bound changed to permit one-past-endsrc/test/fuzz/mini_miner.cpp:86concurrency:1 | drop | Not accepted | report |
| #35763 | Atomic replacement changes existing JSON file permissionssrc/common/settings.cpp:136concurrency:1 | drop | Not accepted | report |
| #35788 | Tapscript sigop cost is always reported as zerosrc/bitcoin-util.cpp:403concurrency:1 | drop | Not accepted | report |
| #35911 | `[[noreturn]]` is false when assertions are disabledsrc/test/util/net.cpp:237concurrency:1 | drop | Not accepted | report |
| #36629 | asof path can mark an output spent by a transaction after the selected blocksrc/rpc/blockchain.cpp:4095concurrency:1 | drop | Not accepted | report |
| #36434 | Startup can replace an active Unix RPC socketsrc/netbase.cpp:801concurrency:1 | publish | Accepted, shared | report |
| #36677 | Rejects valid `b` mode on non-Linux POSIX systemssrc/util/fs.cpp:33concurrency:1 | drop | Not accepted | report |
| #36122 | Opted-out signing can use the CISA sighash on witness-v2 outputssrc/script/sign.cpp:703concurrency:1 | drop | Not accepted | report |
| #36188 | ECC context creation races with SHA256 dispatch updatessrc/ecc_context.cpp:32concurrency:1 | publish | Accepted, shared | report |
| #36628 | Worker submission failure can leave a job permanently runningsrc/node/privbcast.cpp:378concurrency:1 | drop | Not accepted | report |
| #33904 | REST results can differ from request ordersrc/rest.cpp:987concurrency:1 | publish | Accepted, shared | report |
| #36677 | POSIX fcntl update can clear preexisting descriptor flagssrc/util/fs.cpp:27concurrency:1 | drop | Not accepted | report |
| #33904 | Mixed mempool and index results do not preserve request ordersrc/rest.cpp:987concurrency:1 | publish | Accepted, shared | report |
| #33904 | Mixed lookups return results out of request ordersrc/rest.cpp:986concurrency:1 | publish | Accepted, shared | report |
| #36677 | Fix the syntax errors in the Windows test branchsrc/test/fs_tests.cpp:157concurrency:1 | publish | Accepted, shared | report |
| #36677 | Windows test does not compile: misspelled cast helpersrc/test/fs_tests.cpp:157concurrency:1 | undisposed | Not accepted | report |
| #36607 | Decide whether eviction should end the privacy guardsrc/private_broadcast.cpp:41concurrency:1 | publish | Accepted, shared | report |
| #36607 | Finished entries can be evicted while they still guard against public announcementssrc/private_broadcast.cpp:41concurrency:1 | undisposed | Not accepted | report |
| #36681 | Free selected prune files before the coins disk-space preflightsrc/validation.cpp:2829concurrency:1 | publish | Accepted, shared | report |
| #36681 | Sync prune-forced coins batches before committing the prune indexsrc/validation.cpp:2828concurrency:2 | publish | Accepted, shared | report |
| #36607 | Eviction can forget a transaction while its initial private sends are still in flightsrc/private_broadcast.cpp:49concurrency:1 | drop | Not accepted | report |
| #36677 | Windows test contains an invalid cast and assertion syntaxsrc/test/fs_tests.cpp:157concurrency:1 | undisposed | Not accepted | report |
| #36677 | The POSIX close-on-exec setting is not atomic with openingsrc/util/fs.cpp:26concurrency:2 | undisposed | Not accepted | report |
| #36292 | Non-empty legacy directory is left behind after database removalsrc/index/coinstatsindex.cpp:98concurrency:1 | drop | Not accepted | report |
| #36677 | The new test does not compile on Windowssrc/test/fs_tests.cpp:149concurrency:1 | undisposed | Not accepted | report |
| #36188 | Run SHA256 autodetection once per processsrc/ecc_context.cpp:32concurrency:1 | publish | Accepted, shared | report |
| #36180 | Include `-prev` writes in `setOption`'s success trackingsrc/qt/optionsmodel.cpp:509concurrency:1 | publish | Accepted, shared | report |
| #36628 | A failed multi-socket wait can make the job sleep past cancellationsrc/privbcast/job.cpp:104concurrency:1 | drop | Not accepted | report |
| #36677 | The new test uses POSIX-only descriptor APIs unconditionallysrc/test/fs_tests.cpp:149concurrency:1 | undisposed | Not accepted | report |
| #36188 | Context singleton can be published concurrently without synchronizationsrc/ecc_context.cpp:44concurrency:1 | drop | Not accepted | report |
| #35793 | Mempool rejects 64-byte transactions before BIP54 activationsrc/validation.cpp:809concurrency:1 | drop | Not accepted | report |
| #36481 | Check the selection before indexing itsrc/qt/transactionview.cpp:404concurrency:1 | publish | Accepted, shared | report |
| #35713 | BOOST_CHECK_MESSAGE discards the supplied diagnostic messagesrc/test/util/framework.h:615concurrency:1 | drop | Not accepted | report |
| #35793 | 64-byte consensus check is bypassed during chainstate reindexsrc/validation.cpp:4179concurrency:1 | unresolved | Not accepted | report |
| #36628 | Receive cap can be bypassed by transport bufferingsrc/privbcast/attempt.cpp:113concurrency:1 | drop | Not accepted | report |
| #36673 | Exact-title search can miss an existing expiry alert.github/workflows/code-signing-certificate.yml:48concurrency:1 | undisposed | Not accepted | report |
| #36481 | Rebroadcast action can dereference an empty selectionsrc/qt/transactionview.cpp:401concurrency:1 | undisposed | Not accepted | report |
| #36628 | Clock rollback can violate discovery-window serializationsrc/node/privbcast.cpp:260concurrency:1 | drop | Not accepted | report |
| #35558 | Deadlocks when sending a compact-block announcement under cs_mainsrc/net_processing.cpp:2390concurrency:1 | drop | Not accepted | report |
| #35524 | Genesis lookup uses the block-file header position, not the block data positionsrc/validation.cpp:4969concurrency:1 | unresolved | Not accepted | report |
| #36664 | Preserve error monitoring for SEND-only waitssrc/util/sock.cpp:213concurrency:1 | publish | Accepted, shared | report |
| #36629 | Bound ranged-descriptor expansion and miss probessrc/rpc/blockchain.cpp:3904concurrency:1 | publish | Accepted, shared | report |
| #36603 | Snapshot summaries fail when stdin is a pipesrc/utxo_snapshot.h:228concurrency:1 | unresolved | Not accepted | report |
| #36603 | Writer failures can deadlock snapshot loadingsrc/node/utxo_snapshot.cpp:162concurrency:2 | publish | Accepted, shared | report |
| #36540 | Update the mempool memory estimate after removing an indexsrc/txmempool.h:214concurrency:1 | unresolved | Not accepted | report |
| #36664 | Use large-file POSIX seek and tell APIssrc/util/fs_helpers.h:59concurrency:1 | publish | Accepted, shared | report |
| #36628 | Reject trailing bytes in acted-on messagessrc/privbcast/attempt.cpp:301concurrency:1 | unresolved | Not accepted | report |
| #36543 | A commitment mismatch can be bypassed by restartingsrc/validation.cpp:3078concurrency:1 | drop | Not accepted | report |
| #35442 | Test funded transaction sequences for deprecated replaceable handlingtest/functional/wallet_deprecated_rbf.py:59concurrency:1 | publish | Accepted, shared | report |
| #36572 | Check loop state without dereferencing an inactive optionalsrc/ipc/capnp/protocol.cpp:184concurrency:1 | unresolved | Not accepted | report |
| #36607 | Suppress announcements of alternate witnesses with the same TXIDsrc/private_broadcast.cpp:89concurrency:1 | publish | Accepted, sole | report |
| #36259 | Synchronize the race test instead of relying on a fixed sleepsrc/test/httpserver_tests.cpp:1120concurrency:1 | publish | Accepted, shared | report |
| #35641 | Trace oversized scripts rejected before the scope is createdsrc/script/interpreter.cpp:448concurrency:1 | publish | Accepted, shared | report |
| #36481 | Report rebroadcast failures in the GUIsrc/qt/transactionview.cpp:408concurrency:1 | publish | Accepted, shared | report |
| #36481 | Correct the rebroadcast interface commentssrc/interfaces/wallet.h:166concurrency:2 | publish | Accepted, shared | report |
| #36122 | A finalized non-final CISA member prevents the rest of its group from finalizingsrc/psbt.cpp:863concurrency:1 | unresolved | Not accepted | report |
| #36540 | Update the memory estimate for the removed indexsrc/txmempool.h:214concurrency:1 | publish | Accepted, shared | report |
| #35793 | Reindexing can bypass the always-active regtest coinbase rulessrc/validation.cpp:4200concurrency:1 | unresolved | Not accepted | report |
| #36589 | Confirm the new certvalidator commit remains fail-closed for unknown critical extensionscontrib/guix/manifest_codesign.scm:55concurrency:1 | unresolved | Not accepted | report |
| #36589 | Limit the dependency test bypass to native RISC-V builderscontrib/guix/manifest_gui.scm:20concurrency:2 | publish | Accepted, shared | report |
| #29409 | Reject out-of-range broadcast method valuessrc/ipc/capnp/chain.capnp:71concurrency:1 | unresolved | Not accepted | report |
| #29418 | Sent counts include messages that may not complete transmissionsrc/net.cpp:1640concurrency:1 | publish | Accepted, shared | report |
| #31672 | Use monotonic elapsed time for `cpu_load`src/rpc/net.cpp:265concurrency:1 | publish | Accepted, shared | report |
| #32387 | Failed Windows spawns leak process and socket handlessrc/ipc/libmultiprocess/src/mp/util.cpp:427concurrency:1 | unresolved | Not accepted | report |
| #32387 | Unexpected shutdown errors can escape a noexcept client destructorsrc/ipc/libmultiprocess/src/mp/proxy.cpp:177concurrency:2 | unresolved | Not accepted | report |
| #36649 | Avoid applying stack-clash protection to unsupported Linux targetsdepends/hosts/linux.mk:10concurrency:1 | unresolved | Not accepted | report |
| #33112 | Keep the wallet unlocked through deferred PSBT signingsrc/qt/walletmodel.cpp:206concurrency:1 | publish | Accepted, shared | report |
| #33922 | Template cleanup can access the manager after shutdown resets itsrc/node/interfaces.cpp:894concurrency:1 | unresolved | Not accepted | report |
| #34400 | Recheck descriptor ranges before consuming parallel verdictssrc/wallet/scan.cpp:488concurrency:1 | publish | Accepted, sole | report |
| #34400 | Read-ahead can scan a block after it has left the active chainsrc/wallet/scan.cpp:501concurrency:2 | unresolved | Not accepted | report |
| #34775 | Serialize concurrent log output to prevent interleaved linessrc/bitcoin-chainstate.cpp:57concurrency:1 | publish | Accepted, shared | report |
| #36628 | Mempool race records submission timesrc/node/privbcast.cpp:181concurrency:1 | publish | Accepted, sole | report |
| #34824 | Measure the inventory-buffer allocation tradeoffsrc/net_processing.cpp:6316concurrency:1 | publish | Accepted, shared | report |
| #33904 | Preserve request order across mempool and index resultssrc/rest.cpp:968concurrency:1 | publish | Accepted, shared | report |
| #36628 | Queued transaction storage has no aggregate byte budgetsrc/node/privbcast.cpp:166concurrency:1 | unresolved | Not accepted | report |
| #35139 | Failure formatting can read past a non-terminated char arraysrc/test/util/common.h:121concurrency:1 | publish | Accepted, shared | report |
| #35229 | Include the direct <functional> dependencysrc/chain.h:385concurrency:1 | publish | Accepted, shared | report |
| #36629 | Bound descriptor expansion and empty index probessrc/rpc/blockchain.cpp:3902concurrency:1 | publish | Accepted, shared | report |
| #36630 | Test loading a datadir that was already prunedsrc/test/kernel/test_kernel.cpp:900concurrency:1 | publish | Accepted, shared | report |
| #36480 | Preserve an indeterminate result when a spender cannot be readsrc/index/txospenderindex.cpp:159concurrency:1 | publish | Accepted, shared | report |
| #36628 | Recipient-controlled completion can change later start spacingsrc/node/privbcast.cpp:315concurrency:1 | publish | Accepted, sole | report |
| #36628 | A raced mempool arrival is reported at submission timesrc/node/privbcast.cpp:182concurrency:1 | publish | Accepted, sole | report |
| #33741 | Preserve `estimatesmartfee`'s positional options argumentsrc/rpc/fees.cpp:56concurrency:1 | publish | Accepted, shared | report |
| #33741 | Replace the existing fee-result descriptionssrc/rpc/net.cpp:724concurrency:2 | publish | Accepted, shared | report |
| #36619 | Pruning can race with the undo-availability checksrc/rest.cpp:377concurrency:1 | publish | Accepted, shared | report |
| #35387 | Keep info-only categories out of the category masksrc/init/common.cpp:98concurrency:1 | publish | Accepted, shared | report |
| #35511 | Guard the concept declaration from Qt mocsrc/consensus/amount.h:20concurrency:1 | unresolved | Not accepted | report |
| #36619 | A prune race can still log an error when reading undo datasrc/rest.cpp:377concurrency:1 | publish | Accepted, shared | report |
| #36603 | Check for interruption within large txid groupssrc/utxo_snapshot.h:160concurrency:1 | publish | Accepted, sole | report |
| #36619 | Pruning can still trigger the error this guard is meant to suppresssrc/rest.cpp:377concurrency:1 | publish | Accepted, shared | report |
| #35558 | Deadlocks when sending compact blocks under cs_mainsrc/net_processing.cpp:2390concurrency:1 | drop | Not accepted | report |
| #35558 | Preserve queued message sizes across V2 fallbacksrc/net.cpp:1680concurrency:2 | publish | Accepted, sole | report |
Selection uses publish, drop and unresolved candidates; unassessed candidates are excluded.