Accepted findings
61
26 unique; 35 shared
gpt-6-luna
Candidate rows can merge into one accepted finding. Publish is the verifier decision; accepted attribution is recorded separately.
| PR | Finding | Verifier decision | Attribution | Report |
|---|---|---|---|---|
| #36437 | Erasing the last indexed announcement can dereference end()src/node/txorphanage.cpp:277dead_code:1 | drop | Not accepted | report |
| #35932 | Use size_t-compatible format specifiers for drain countssrc/ipc/capnp/protocol.cpp:157dead_code:1 | undisposed | Not accepted | report |
| #10102 | CoinControl maximum depth is replaced by the minimum depth over IPCsrc/ipc/capnp/wallet.cpp:196dead_code:1 | publish | Accepted, shared | report |
| #25573 | The static PIE linker flag is overwritten before CMake runscontrib/guix/libexec/build_linux.sh:48dead_code:1 | drop | Not accepted | report |
| #25573 | Static glibc disables dynamic NSS module loading for all name-service databasescontrib/guix/patches/glibc-nss-nodlopen.patch:15dead_code:2 | drop | Not accepted | report |
| #30437 | Final tip comparison dereferences an empty optionalsrc/bitcoin-mine.cpp:159dead_code:1 | publish | Accepted, shared | report |
| #30437 | Avoid signed format mismatch for max triessrc/bitcoin-mine.cpp:164dead_code:2 | drop | Not accepted | report |
| #30988 | I2P accept errors no longer withdraw the advertised addresssrc/common/sockman.cpp:389dead_code:1 | drop | Not accepted | report |
| #36631 | PSBT mutations are truncated without preserving map boundariessrc/test/fuzz/util/psbt.cpp:478dead_code:1 | publish | Accepted, shared | report |
| #32468 | Mempool fee revenue is omitted from the coinbase reward calculationsrc/rpc/mining.cpp:494dead_code:1 | drop | Not accepted | report |
| #33324 | Removing the original before syncing its directory can lose the only usable copysrc/node/blockstorage.cpp:268dead_code:1 | drop | Not accepted | report |
| #33324 | Zero-file migration can activate a new key without rewriting any filessrc/node/blockstorage.cpp:1357dead_code:2 | drop | Not accepted | report |
| #36673 | GitHub issue search can miss an existing expiry alert.github/workflows/code-signing-certificate.yml:52dead_code:1 | drop | Not accepted | report |
| #34360 | Spending batches accidentally burn the retained outputs toosrc/bench/wallet_balance.cpp:100dead_code:1 | drop | Not accepted | report |
| #29491 | Batch allocation failure leaks the batch objectsrc/secp256k1/src/modules/batch/main_impl.h:121dead_code:1 | drop | Not accepted | report |
| #29491 | Sequential batch verification does not cache successful script executionsrc/validation.cpp:2653dead_code:2 | drop | Not accepted | report |
| #29491 | Batch verification uses an uninitialized result when Strauss allocation failssrc/secp256k1/src/modules/batch/main_impl.h:185dead_code:3 | drop | Not accepted | report |
| #36677 | Non-Linux POSIX fopen path rejects valid modes containing `b`src/util/fs.cpp:36dead_code:1 | undisposed | Not accepted | report |
| #35027 | `-nooutboundbind` does not disable configured addressessrc/init.cpp:577dead_code:1 | drop | Not accepted | report |
| #35071 | Resume checkpoint can skip files when the file scan stops at a gapsrc/node/blockstorage.cpp:1326dead_code:1 | drop | Not accepted | report |
| #35071 | Progress writes are not synchronized with the block files being checkpointedsrc/node/blockstorage.cpp:1349dead_code:2 | drop | Not accepted | report |
| #36521 | Extended-format transactions with an empty vin no longer parse their output countsrc/primitives/transaction.h:269dead_code:1 | drop | Not accepted | report |
| #36607 | Eviction removes the guard for transactions that have not propagatedsrc/private_broadcast.cpp:41dead_code:1 | publish | Accepted, shared | report |
| #35994 | Incomplete and inconsistent annotations can produce invalid constructor fix-itscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:146dead_code:1 | drop | Not accepted | report |
| #35994 | The fix-it can change side effects, dependencies, and repeated assignmentscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:169dead_code:2 | publish | Accepted, shared | report |
| #36618 | The new sync helper waits forever when a node has no enabled indexestest/functional/test_framework/test_framework.py:748dead_code:1 | drop | Not accepted | report |
| #35558 | Congestion window is treated as bytes on BSD and macOSsrc/util/sock.h:410dead_code:1 | drop | Not accepted | report |
| #36628 | Receive-cap check happens after processing bytes at the capsrc/privbcast/attempt.cpp:96dead_code:1 | drop | Not accepted | report |
| #35642 | Use a format specifier matching `size_t`src/net_processing.cpp:2148dead_code:1 | drop | Not accepted | report |
| #35511 | Mixed-width multiplication can overflow before producing a CAmountsrc/consensus/amount.h:88dead_code:1 | drop | Not accepted | report |
| #36626 | Missing-version test constructs a v0 PSBT, so its expected error is wrongtest/functional/rpc_psbt.py:852dead_code:1 | drop | Not accepted | report |
| #36690 | Avoid relying on guessed collision strings in checksum testssrc/test/bech32_tests.cpp:11dead_code:1 | drop | Not accepted | report |
| #35788 | `taproot` sigversion is reported as unknownsrc/bitcoin-util.cpp:295dead_code:1 | drop | Not accepted | report |
| #36325 | Key-origin path extraction is off by onecontrib/multisig/wizard.py:84dead_code:1 | drop | Not accepted | report |
| #36325 | Taproot MuSig key-path validation ignores multipath alignmentcontrib/multisig/wizard.py:244dead_code:2 | drop | Not accepted | report |
| #35911 | Removing the return makes forbidden socket assignments undefined in release buildssrc/test/util/net.cpp:239dead_code:1 | drop | Not accepted | report |
| #36033 | Zip import inputs using the shorter input lengthsrc/kernel/bitcoinkernel.cpp:1344dead_code:1 | drop | Not accepted | report |
| #36434 | Failed IP lookup can leave only a Unix socket without allowipsrc/httpserver.cpp:269dead_code:1 | drop | Not accepted | report |
| #36434 | Stale-socket cleanup follows symlink race before bindsrc/netbase.cpp:773dead_code:2 | drop | Not accepted | report |
| #36677 | Non-Linux POSIX fallback rejects valid fopen mode modifierssrc/util/fs.cpp:33dead_code:1 | drop | Not accepted | report |
| #36690 | The 1023-character section overstates the checksum guaranteesrc/test/bech32_tests.cpp:220dead_code:1 | publish | Accepted, sole | report |
| #36434 | Unix socket permissions are changed after bind, leaving a local access racesrc/netbase.cpp:836dead_code:1 | drop | Not accepted | report |
| #36114 | Sighash filtering can be bypassed by signatures with invalid-length encodingssrc/external_signer.cpp:113dead_code:1 | drop | Not accepted | report |
| #36677 | Exclusive-create mode is dropped for append modessrc/util/fs.cpp:42dead_code:1 | drop | Not accepted | report |
| #36631 | Mutator can write past libFuzzer's supplied buffersrc/test/fuzz/util/psbt.cpp:478dead_code:1 | drop | Not accepted | report |
| #36434 | Startup unlinks an active RPC socket instead of reporting a conflictsrc/netbase.cpp:801dead_code:1 | publish | Accepted, shared | report |
| #36648 | Long invalid path values can still be echoed by the empty-element errorsrc/util/bip32.cpp:33dead_code:1 | drop | Not accepted | report |
| #33904 | REST results can differ from request ordersrc/rest.cpp:987dead_code:1 | publish | Accepted, shared | report |
| #36677 | POSIX close-on-exec is not atomic with opening the filesrc/util/fs.cpp:26dead_code:1 | publish | Accepted, shared | report |
| #36631 | Truncating serialized mutations can overwrite beyond libFuzzer's buffer limitsrc/test/fuzz/util/psbt.cpp:475dead_code:1 | drop | Not accepted | report |
| #33904 | Mixed mempool and index results do not preserve request ordersrc/rest.cpp:987dead_code:1 | publish | Accepted, shared | report |
| #33904 | Mixed lookups return results out of request ordersrc/rest.cpp:986dead_code:1 | publish | Accepted, shared | report |
| #36677 | Fix the syntax errors in the Windows test branchsrc/test/fs_tests.cpp:157dead_code:1 | publish | Accepted, shared | report |
| #36677 | Windows inheritance assertion is malformedsrc/test/fs_tests.cpp:159dead_code:1 | undisposed | Not accepted | report |
| #36607 | Confirm the eviction window covers delayed wallet rebroadcastssrc/private_broadcast.cpp:51dead_code:1 | publish | Accepted, sole | report |
| #36326 | Fatal error casts assume C++ variant order matches C API numeric valuessrc/kernel/bitcoinkernel.cpp:209dead_code:1 | drop | Not accepted | report |
| #36588 | Capitalize test compares mismatched string typessrc/test/util_tests.cpp:1177dead_code:1 | drop | Not accepted | report |
| #36481 | Check the selection before indexing itsrc/qt/transactionview.cpp:404dead_code:1 | publish | Accepted, shared | report |
| #25573 | Static-PIE linker flags are overridden by the next CMake argumentcontrib/guix/libexec/build_linux.sh:48dead_code:1 | undisposed | Not accepted | report |
| #36628 | The receive cap still processes bytes read past the capsrc/privbcast/attempt.cpp:98dead_code:1 | drop | Not accepted | report |
| #36674 | Remove the now-unreachable trailing returnsrc/leveldb/db/log_reader.cc:172dead_code:1 | drop | Not accepted | report |
| #36672 | Update fork instructions for runner selection.github/workflows/ci.yml:32dead_code:1 | publish | Accepted, shared | report |
| #36481 | Guard against an empty selection before indexing itsrc/qt/transactionview.cpp:401dead_code:1 | undisposed | Not accepted | report |
| #36671 | Update the forked-runner instructions.github/workflows/ci.yml:32dead_code:1 | publish | Accepted, sole | report |
| #36672 | Update the fork instructions for selecting Warp runners.github/workflows/ci.yml:32dead_code:1 | publish | Accepted, sole | report |
| #36664 | Preserve error monitoring for SEND-only waitssrc/util/sock.cpp:213dead_code:1 | publish | Accepted, shared | report |
| #36642 | Remove the redundant JSON-RPC version resetsrc/rpc/request.cpp:206dead_code:1 | publish | Accepted, sole | report |
| #36670 | Erase timing entries when transactions leave the modelsrc/test/fuzz/private_broadcast.cpp:54dead_code:1 | publish | Accepted, sole | report |
| #36670 | Remove stale entries from the fuzz model's timing mapssrc/test/fuzz/private_broadcast.cpp:54dead_code:1 | unresolved | Not accepted | report |
| #36603 | Remove unused standard-library includessrc/bitcoin-util.cpp:31dead_code:1 | drop | Not accepted | report |
| #36540 | Update the per-entry memory estimate for the removed indexsrc/txmempool.cpp:829dead_code:1 | unresolved | Not accepted | report |
| #36664 | SEND-only waits omit exception monitoring with `select()`src/util/sock.cpp:213dead_code:1 | publish | Accepted, shared | report |
| #36661 | Complete or constrain 64-bit positioning on 32-bit POSIXsrc/util/fs_helpers.h:59dead_code:1 | publish | Accepted, shared | report |
| #33741 | Inserting `sat_vb` breaks positional `options` callssrc/rpc/fees.cpp:56dead_code:1 | publish | Accepted, shared | report |
| #36658 | Give the #35919 clamp note its own bulletdoc/release-notes.md:121dead_code:1 | publish | Accepted, shared | report |
| #36637 | Update the password-format commentsrc/torcontrol.cpp:667dead_code:1 | publish | Accepted, sole | report |
| #36665 | Send-only waits no longer report socket errors consistentlysrc/util/sock.cpp:219dead_code:1 | unresolved | Not accepted | report |
| #35442 | Test funded transaction sequences for deprecated replaceable handlingtest/functional/wallet_deprecated_rbf.py:59dead_code:1 | publish | Accepted, shared | report |
| #33959 | Remove the unused block-result indexingtest/functional/wallet_rescan_unconfirmed.py:49dead_code:1 | publish | Accepted, sole | report |
| #31507 | Remove the unused MSVC-only `<cstdlib>` includesrc/compat/byteswap.h:32dead_code:1 | publish | Accepted, sole | report |
| #36583 | Avoid storing the unused migration resulttest/functional/wallet_migration.py:1196dead_code:1 | drop | Not accepted | report |
| #36548 | Remove unused includes added for block servingsrc/bench/readwriteblock.cpp:14dead_code:1 | drop | Not accepted | report |
| #36482 | Update comments to describe the added-only broadcast modesrc/node/transaction.cpp:138dead_code:1 | unresolved | Not accepted | report |
| #36540 | Update the memory estimate for the removed indexsrc/txmempool.h:214dead_code:1 | publish | Accepted, shared | report |
| #36188 | Remove the unused `<span>` includesrc/common/ecc_init.cpp:14dead_code:1 | drop | Not accepted | report |
| #36488 | Cover alias-only requests with the deprecation flag enabledtest/functional/wallet_bumpfee.py:65dead_code:1 | publish | Accepted, shared | report |
| #36603 | Remove unused standard-library includessrc/node/utxo_snapshot.cpp:28dead_code:1 | unresolved | Not accepted | report |
| #36603 | Remove unused standard-library includessrc/bitcoin-util.cpp:31dead_code:2 | publish | Accepted, sole | report |
| #35762 | Remove the redundant `testdir` truthiness checktest/functional/test_runner.py:676dead_code:1 | drop | Not accepted | report |
| #35224 | Test a missing timestamp in a multi-request batchtest/functional/wallet_importdescriptors.py:341dead_code:1 | publish | Accepted, shared | report |
| #36641 | Remove the unused `Size` accessorsrc/musig.h:90dead_code:1 | publish | Accepted, sole | report |
| #31507 | Remove the unused MSVC-only `<cstdlib>` includesrc/compat/byteswap.h:29dead_code:1 | publish | Accepted, sole | report |
| #36645 | A matching high file-info key bypasses the allocation guardsrc/node/blockstorage.cpp:572dead_code:1 | publish | Accepted, shared | report |
| #33922 | Remove or exercise the unused SanityCheck helpersrc/node/block_template_manager.cpp:110dead_code:1 | publish | Accepted, shared | report |
| #33922 | Remove the unused BlockTemplateManager::SanityCheck helpersrc/node/block_template_manager.cpp:110dead_code:2 | unresolved | Not accepted | report |
| #36114 | Remove unused `<map>` and `<set>` includessrc/external_signer.cpp:24dead_code:1 | publish | Accepted, sole | report |
| #36641 | Remove the unused `Size()` accessorsrc/musig.h:90dead_code:1 | publish | Accepted, sole | report |
| #36641 | Avoid binding the unused map iteratorsrc/musig.cpp:130dead_code:2 | drop | Not accepted | report |
| #34038 | Remove orphaned log-level parsing helperssrc/init/common.cpp:62dead_code:1 | publish | Accepted, sole | report |
| #34405 | Drop the unused script bindingsrc/wallet/spend.cpp:1271dead_code:1 | drop | Not accepted | report |
| #36637 | Update the password-authentication examplesrc/torcontrol.cpp:667dead_code:1 | publish | Accepted, shared | report |
| #34775 | Serialize concurrent log output to prevent interleaved linessrc/bitcoin-chainstate.cpp:57dead_code:1 | publish | Accepted, shared | report |
| #36628 | Remove the unused `GetPlan()` accessorsrc/privbcast/job.h:112dead_code:1 | publish | Accepted, sole | report |
| #33904 | Preserve request order across mempool and index resultssrc/rest.cpp:968dead_code:1 | publish | Accepted, shared | report |
| #34969 | The conditional result cannot bind to `auto&`src/wallet/test/fuzz/scriptpubkeyman.cpp:144dead_code:1 | publish | Accepted, sole | report |
| #36628 | Remove the unused `GetPlan()` accessorsrc/privbcast/job.h:112dead_code:1 | publish | Accepted, sole | report |
| #36325 | Remove unused wallet RPC proxiestest/functional/tool_multisig_wizard.py:295dead_code:1 | unresolved | Not accepted | report |
| #36631 | Remove the redundant `<pubkey.h>` includesrc/test/fuzz/util/psbt.cpp:10dead_code:1 | publish | Accepted, sole | report |
| #36628 | Remove unused SOCKS credential accessorssrc/privbcast/socks5.h:83dead_code:1 | publish | Accepted, sole | report |
| #36629 | Remove unused OrderedVarInt cutover constantssrc/index/ordered_varint.h:33dead_code:1 | publish | Accepted, sole | report |
| #36629 | Remove the unused array includesrc/index/txoscriptindex.cpp:27dead_code:2 | publish | Accepted, sole | report |
| #36630 | Test loading a datadir that was already prunedsrc/test/kernel/test_kernel.cpp:900dead_code:1 | publish | Accepted, shared | report |
| #36628 | Remove the unused SOCKS5 credential accessorssrc/privbcast/socks5.h:83dead_code:1 | publish | Accepted, sole | report |
| #33741 | Preserve `estimatesmartfee`'s positional options argumentsrc/rpc/fees.cpp:56dead_code:1 | publish | Accepted, shared | report |
| #33741 | Replace the existing fee-result descriptionssrc/rpc/net.cpp:724dead_code:2 | publish | Accepted, shared | report |
| #33741 | Document the units of `estimaterawfee` result ratessrc/rpc/fees.cpp:173dead_code:3 | unresolved | Not accepted | report |
| #36588 | Replace the unused `<algorithm>` includesrc/qt/walletcontroller.cpp:182dead_code:1 | publish | Accepted, sole | report |
| #36477 | Remove the unused `num_picked` bindingsrc/test/fuzz/private_broadcast.cpp:66dead_code:1 | drop | Not accepted | report |
| #36619 | Pruning can race with the undo-availability checksrc/rest.cpp:377dead_code:1 | publish | Accepted, shared | report |
| #36623 | Remove the unreachable `OP_RETURN` breaksrc/script/interpreter.cpp:683dead_code:1 | publish | Accepted, shared | report |
| #35387 | Remove the unused category flag bindingsrc/logging.cpp:301dead_code:1 | publish | Accepted, sole | report |
| #35433 | Retain coverage for `bumpfee(replaceable=false)`test/functional/wallet_bumpfee.py:719dead_code:1 | publish | Accepted, shared | report |
| #35511 | Remove the unused `operator*=` helpersrc/wallet/test/coinselector_tests.cpp:29dead_code:1 | publish | Accepted, sole | report |
| #36619 | A prune race can still log an error when reading undo datasrc/rest.cpp:377dead_code:1 | publish | Accepted, shared | report |
| #36305 | Fail closed if Windows socket exclusivity cannot be setsrc/net.cpp:3400dead_code:1 | publish | Accepted, shared | report |
| #34038 | Remove orphaned log-level formatting and setter APIssrc/init.cpp:1168dead_code:1 | unresolved | Not accepted | report |
| #35558 | Remove the unused `<set>` includesrc/bench/blockencodings.cpp:25dead_code:1 | unresolved | Not accepted | report |
Selection uses publish, drop and unresolved candidates; unassessed candidates are excluded.