Accepted findings
23
4 unique; 19 shared
build
gpt-6-luna
Completion
94.8%
210 executed runs; skipped excluded
Request records
424
Includes reruns and retries
Input tokens
14,352,515 (partial)
Candidate findings
Candidate rows can merge into one accepted finding. Publish is the verifier decision; accepted attribution is recorded separately.
| PR | Finding | Verifier decision | Attribution | Report |
|---|---|---|---|---|
| #35932 | Incoming connections accepted during the drain can still outlive node statesrc/ipc/capnp/protocol.cpp:140build:1 | undisposed | Not accepted | report |
| #35354 | A tip update can make a racing compact-filter request permanentsrc/net_processing.cpp:3579build:1 | drop | Not accepted | report |
| #10102 | CoinControl maximum depth is replaced by the minimum depth over IPCsrc/ipc/capnp/wallet.cpp:196build:1 | publish | Accepted, shared | report |
| #30437 | Final tip comparison dereferences an empty optionalsrc/bitcoin-mine.cpp:159build:1 | publish | Accepted, shared | report |
| #30988 | Proxy connection failures are reported as address-attempt failuressrc/common/sockman.cpp:186build:1 | drop | Not accepted | report |
| #36631 | PSBT mutations are truncated without preserving map boundariessrc/test/fuzz/util/psbt.cpp:478build:1 | publish | Accepted, shared | report |
| #36628 | Job-pool submission failure can leave a job permanently runningsrc/node/privbcast.cpp:378build:1 | drop | Not accepted | report |
| #36628 | Receive-cap overflow can wrap the byte countersrc/privbcast/attempt.cpp:97build:2 | drop | Not accepted | report |
| #32387 | Overlapped pipe connection can hang when the child connects immediatelysrc/ipc/libmultiprocess/src/mp/util.cpp:441build:1 | drop | Not accepted | report |
| #36677 | Append mode can return a stream positioned at EOF on failed lseeksrc/util/fs.cpp:60build:1 | undisposed | Not accepted | report |
| #36521 | Witness-format empty-input transactions with outputs are misparsedsrc/primitives/transaction.h:269build:1 | drop | Not accepted | report |
| #36122 | Finalized aggregated inputs can be silently omitted from their groupsrc/psbt.cpp:863build:1 | drop | Not accepted | report |
| #35994 | Fix-it can combine assignments from different annotation groupscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:146build:1 | drop | Not accepted | report |
| #35558 | Prefill candidates can underflow short-ID reserve sizesrc/blockencodings.cpp:26build:1 | drop | Not accepted | report |
| #35558 | Window calculation wraps when queued data exceeds a windowsrc/net.cpp:4268build:2 | drop | Not accepted | report |
| #35558 | TCP_INFO failures report the wrong error sourcesrc/util/sock.h:370build:3 | drop | Not accepted | report |
| #36629 | As-of spender lookup can report a transaction from after the snapshotsrc/rpc/blockchain.cpp:4095build:1 | drop | Not accepted | report |
| #36434 | Mixed unix/IP binds without rpcallowip can expose an unintended localhost RPC listenersrc/httpserver.cpp:212build:1 | drop | Not accepted | report |
| #35642 | Extreme but legal attack budgets can overflow the integer exponent conversionsrc/headerssync.cpp:458build:1 | drop | Not accepted | report |
| #35511 | Unary negation overflows for the minimum representable amountsrc/consensus/amount.h:45build:1 | drop | Not accepted | report |
| #35302 | Rejecting unknown-witness inputs only checks the top-level scriptsrc/wallet/spend.cpp:326build:1 | drop | Not accepted | report |
| #35302 | Fee bumping accepts duplicate silent-payment outputs as a complete matchsrc/wallet/feebumper.cpp:288build:2 | drop | Not accepted | report |
| #35671 | Reject templates whose transaction set exceeds block weight or sigop limitssrc/node/tx_collection.cpp:153build:1 | drop | Not accepted | report |
| #35713 | Descriptor key-count failures omit the compared valuessrc/test/descriptor_tests.cpp:297build:1 | publish | Accepted, sole | report |
| #35820 | Leap-year durations change the displayed year/week splitsrc/qt/guiutil.cpp:795build:1 | drop | Not accepted | report |
| #36628 | Receive cap is checked only after parsing the entire readsrc/privbcast/attempt.cpp:113build:1 | drop | Not accepted | report |
| #36628 | An idle job can sleep past a cancellationsrc/privbcast/job.cpp:128build:2 | drop | Not accepted | report |
| #35855 | Linux GUI Guix builds no longer treat linker warnings as errorscontrib/guix/libexec/build_linux.sh:42build:1 | drop | Not accepted | report |
| #35911 | The new noreturn annotation makes a valid assertion-disabled path undefinedsrc/test/fuzz/util/net.cpp:131build:1 | drop | Not accepted | report |
| #36629 | As-of queries can return spenders from after the selected blocksrc/rpc/blockchain.cpp:4083build:1 | drop | Not accepted | report |
| #36000 | A later read-ahead future can be discarded without waiting for itsrc/node/blockfetcher.cpp:44build:1 | drop | Not accepted | report |
| #36434 | Startup can replace another node’s live Unix RPC socketsrc/netbase.cpp:801build:1 | publish | Accepted, shared | report |
| #36677 | Windows exclusive-create mode is droppedsrc/util/fs.cpp:29build:1 | drop | Not accepted | report |
| #36434 | Unix socket paths containing NUL are accepted but silently truncatedsrc/netbase.cpp:243build:1 | drop | Not accepted | report |
| #36434 | Permission-restriction failure leaks a bound socket pathsrc/httpserver.cpp:852build:2 | drop | Not accepted | report |
| #36114 | Masking ANYONECANPAY does not correctly isolate the sighash base typesrc/external_signer.cpp:114build:1 | drop | Not accepted | report |
| #36677 | Non-Linux POSIX `fopen` path does not preserve mode semanticssrc/util/fs.cpp:52build:1 | drop | Not accepted | report |
| #36631 | Cap PSBT mutations before copying to libFuzzer's buffersrc/test/fuzz/util/psbt.cpp:459build:1 | drop | Not accepted | report |
| #36434 | Startup unlinks an active RPC socket instead of reporting a conflictsrc/netbase.cpp:801build:1 | publish | Accepted, shared | report |
| #36631 | Clamp mutated output before copying into libFuzzer's buffersrc/test/fuzz/util/psbt.cpp:478build:1 | drop | Not accepted | report |
| #35793 | 64-byte transactions are rejected before BIP54 activationsrc/validation.cpp:812build:1 | drop | Not accepted | report |
| #36677 | POSIX close-on-exec is not atomic with opening the filesrc/util/fs.cpp:26build:1 | publish | Accepted, shared | report |
| #36631 | Malformed PSBTs can make the custom mutator loop foreversrc/test/fuzz/util/psbt.cpp:411build:1 | drop | Not accepted | report |
| #36608 | Package-mode GETDATA can mark an unserved parent as servedsrc/privbcast/attempt.cpp:356build:1 | drop | Not accepted | report |
| #36628 | Failed socket wait can leave the job asleep past its cancellation signalsrc/privbcast/job.cpp:126build:1 | drop | Not accepted | report |
| #36188 | SHA256Transform bypasses the selected optimized implementationsrc/crypto/sha256.cpp:783build:1 | drop | Not accepted | report |
| #36677 | Fix the syntax errors in the Windows test branchsrc/test/fs_tests.cpp:157build:1 | publish | Accepted, shared | report |
| #36628 | Repeated GETDATA can enqueue multiple TX messages before the first is sentsrc/privbcast/attempt.cpp:284build:1 | drop | Not accepted | report |
| #36677 | Windows inheritance assertion is malformedsrc/test/fs_tests.cpp:159build:1 | undisposed | Not accepted | report |
| #36270 | Qt install prefix change does not remove the depends path from CMake metadatadepends/packages/qt.mk:86build:1 | undisposed | Not accepted | report |
| #36603 | Reject output indices that cannot be represented by COutPointsrc/utxo_snapshot.h:164build:1 | drop | Not accepted | report |
| #36603 | Bound MuHash worker count independently of reported hardware concurrencysrc/bitcoin-util.cpp:274build:2 | drop | Not accepted | report |
| #36677 | POSIX close-on-exec setup can erase existing descriptor flagssrc/util/fs.cpp:27build:1 | undisposed | Not accepted | report |
| #36677 | The new descriptor test is not portable to Windowssrc/test/fs_tests.cpp:149build:1 | undisposed | Not accepted | report |
| #36326 | Make fatal-error rendering exhaustivesrc/validation.cpp:2147build:1 | publish | Accepted, shared | report |
| #36188 | SHA transform callback may remain on the portable implementationsrc/ecc_context.cpp:26build:1 | drop | Not accepted | report |
| #36628 | Spacing is redrawn on every scheduler pollsrc/node/privbcast.cpp:325build:1 | drop | Not accepted | report |
| #35793 | 64-byte rejection is unconditional in the mempool, including before activationsrc/validation.cpp:811build:1 | drop | Not accepted | report |
| #35793 | 64-byte transactions are rejected before BIP54 activationsrc/validation.cpp:811build:1 | drop | Not accepted | report |
| #25573 | The static-PIE override replaces the standard executable linker flagscontrib/guix/libexec/build_linux.sh:48build:1 | undisposed | Not accepted | report |
| #36628 | A second matching GETDATA can serve the transaction more than oncesrc/privbcast/attempt.cpp:287build:1 | drop | Not accepted | report |
| #35558 | Windows queued-byte count omits data waiting in the OS send buffersrc/util/sock.cpp:52build:1 | unresolved | Not accepted | report |
| #36666 | Preserve ERR reporting for SEND-only waitssrc/util/sock.cpp:213build:1 | publish | Accepted, sole | report |
| #36664 | Use large-file POSIX seek and tell APIssrc/util/fs_helpers.h:59build:1 | publish | Accepted, sole | report |
| #31507 | Native Windows ARM64 fails architecture detectionCMakeLists.txt:329build:1 | undisposed | Not accepted | report |
| #36629 | Sorting the transformed output-index view is not supportedsrc/rpc/blockchain.cpp:3961build:1 | drop | Not accepted | report |
| #36666 | Preserve ERR reporting for SEND-only waitssrc/util/sock.cpp:213build:1 | publish | Accepted, shared | report |
| #36664 | Preserve ERR monitoring for send-only socketssrc/util/sock.cpp:213build:1 | publish | Accepted, shared | report |
| #36664 | SEND-only waits omit exception monitoring with `select()`src/util/sock.cpp:213build:1 | publish | Accepted, shared | report |
| #36661 | Select misses error events for send-only socketssrc/util/sock.cpp:217build:1 | publish | Accepted, shared | report |
| #36658 | Preserve exception monitoring for send-only waitssrc/util/sock.cpp:222build:1 | publish | Accepted, shared | report |
| #36664 | Select backend misses errors for SEND-only socketssrc/util/sock.cpp:213build:1 | publish | Accepted, shared | report |
| #36669 | Update format specifiers for widened file positionssrc/flatfile.cpp:50build:1 | drop | Not accepted | report |
| #35442 | Test funded transaction sequences for deprecated replaceable handlingtest/functional/wallet_deprecated_rbf.py:59build:1 | publish | Accepted, shared | report |
| #36664 | Replace the generic release-note placeholder before finalizingdoc/release-notes.md:7build:1 | drop | Not accepted | report |
| #35641 | Trace oversized scripts rejected before the scope is createdsrc/script/interpreter.cpp:448build:1 | publish | Accepted, shared | report |
| #36122 | PSBT merging does not reject conflicting half-aggregation signaturessrc/psbt.cpp:471build:1 | drop | Not accepted | report |
| #36188 | Failed verification-context creation can leak the signing contextsrc/ecc_context.cpp:47build:1 | drop | Not accepted | report |
| #36478 | Empty argument names still pass the lintersrc/rpc/util.h:189build:1 | unresolved | Not accepted | report |
| #36114 | Accepts invalid non-default sighash encodingssrc/external_signer.cpp:114build:1 | drop | Not accepted | report |
| #32387 | Include the Winsock 2 header, not the legacy Winsock headersrc/ipc/capnp/protocol.cpp:29build:1 | drop | Not accepted | report |
| #31507 | Select the builtins archive for the target architectureCMakeLists.txt:329build:1 | publish | Accepted, shared | report |
| #36628 | One stalled stream can block every slot past its dial gracesrc/privbcast/job.cpp:119build:1 | drop | Not accepted | report |
| #36628 | Receive-cap overflow is checked after parsing and acting on excess bytessrc/privbcast/attempt.cpp:103build:2 | drop | Not accepted | report |
| #36114 | Taproot signatures with an explicit zero sighash byte bypass the checksrc/external_signer.cpp:107build:1 | drop | Not accepted | report |
| #36628 | Nonmatching GETDATA does not close the attemptsrc/privbcast/attempt.cpp:286build:1 | drop | Not accepted | report |
| #35139 | Failure formatting can read past a non-terminated char arraysrc/test/util/common.h:121build:1 | publish | Accepted, shared | report |
| #36628 | Receive cap is applied only after parsing the entire readsrc/privbcast/attempt.cpp:96build:1 | drop | Not accepted | report |
| #36628 | A stalled job can block shutdown indefinitelysrc/privbcast/job.cpp:120build:1 | drop | Not accepted | report |
| #36628 | First-attempt query-set preference can be bypassedsrc/privbcast/assign.cpp:75build:2 | drop | Not accepted | report |
| #33741 | Replace the existing fee-result descriptionssrc/rpc/net.cpp:724build:1 | publish | Accepted, shared | report |
| #35511 | Reject out-of-range integral constructionsrc/consensus/amount.h:37build:1 | publish | Accepted, sole | report |
Run status
- completed
- 199
- failed
- 4
- invalid
- 7
- skipped
- 327
- Saved runs
- 537
- Executed runs
- 210
Reported coverage
- complete
- 190
- failed
- 0
- partial
- 9
- unknown
- 338
Candidate decisions
- drop
- 59
- publish
- 23
- undisposed
- 8
- unresolved
- 2
- Selected among assessed
- 27.4%
- Accepted / executed run
- 0.110
- Conceptual concerns
- 0
Selection uses publish, drop and unresolved candidates; unassessed candidates are excluded.
Usage
- Request records
- 424
- Input tokens
- 14,352,515 (partial)
- Cached tokens
- 11,317,376 (partial)
- Output tokens
- 33,199 (partial)
- Unknown usage records
- 3