Security context

Highlights

Denial of Service: 85 prior fixes. Scrutinize any change in this area.

src/main.cpp: most-fixed (35 issues). Treat as high-risk during review.

42 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Integer Overflow: A critical integer overflow vulnerability in transaction value tallying allowed arbitrary coin inflation by overflowing inputs and outputs against MAX_MONEY limit checks. Developers must always ensure total coin ranges are strictly validated prior to summation.

Buffer Overflow: The BIP32 CExtKey deserialization was vulnerable to a stack-based buffer overflow due to a missing length check on read size during stream operations. Safe deserialization routines must always enforce fixed size boundaries on direct buffer writes.

Auth Bypass: Flaws in regex validation and primary key matching in the commit signature verification scripts allowed GnuPG validation bypasses via unanchored status lines and unauthorized subkeys. Key verification checks must strictly match expected master fingerprints.