View Issue Details

IDProjectCategoryView StatusLast Update
0009702Talerexchangepublic2026-09-19 14:45
Reporteroec Assigned ToResolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeveritymajorReproducibilityalways
Status informingResolutionfixed 
Product Version0.14 
Target Version1.6Fixed in Version1.6 
Summary0009702: Broken SQL-logic in do_melt skips over nonce-reuse detection, test needed
DescriptionThe logic in src/exchangedb/exchange_do_melt.sql for the detection of re-use of a given nonce
is skipped due to a syntactically correct yet semantically incorrect PLSQL IF statement.
Tagsdebt

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

oec

2025-04-06 17:58

developer   ~0024409

Fixed with commit f73b866c9617f57278ea306cd3ef5a856ec0b645

oec

2025-04-07 09:01

developer   ~0024414

Re-opening this until we have a unit test for proper nonce re-use detection.

Florian Dold

2026-08-27 08:10

manager   ~0029644

Current test_refresh.c now has a dedicated check_nonce_reuse case that reuses a blinding seed and asserts nonce_reuse; added in 982591229.

Issue History

Date ModifiedUsernameFieldChange
2025-04-06 16:15oecNew Issue
2025-04-06 16:15oecStatusnew => assigned
2025-04-06 16:15oecAssigned To => Christian Grothoff
2025-04-06 17:58oecStatusassigned => informing
2025-04-06 17:58oecResolutionopen => fixed
2025-04-06 17:58oecNote Added: 0024409
2025-04-06 18:03Christian GrothoffFixed in Version => 1.0
2025-04-06 18:03Christian GrothoffTarget Versiongit (master) => 1.0
2025-04-07 09:01oecStatusinforming => feedback
2025-04-07 09:01oecResolutionfixed => reopened
2025-04-07 09:01oecNote Added: 0024414
2025-04-07 13:09Christian GrothoffAssigned ToChristian Grothoff =>
2025-04-07 13:09Christian GrothoffStatusfeedback => implementing
2025-04-07 13:09Christian GrothoffFixed in Version1.0 =>
2025-04-07 13:09Christian GrothoffTarget Version1.0 => post-1.0
2025-06-08 18:26Christian GrothoffTag Attached: debt
2025-06-08 18:26Christian GrothoffSummaryBroken SQL-logic in do_melt skips over nonce-reuse detection => Broken SQL-logic in do_melt skips over nonce-reuse detection, test needed
2026-08-27 08:10Florian DoldStatusimplementing => informing
2026-08-27 08:10Florian DoldResolutionreopened => fixed
2026-08-27 08:10Florian DoldNote Added: 0029644
2026-09-19 14:40Christian GrothoffFixed in Version => 1.6
2026-09-19 14:45Christian GrothoffTarget Versionpost-1.0 => 1.6