Skip to content

fix: prevent reception of messages too far into the future - #24645

Merged
nventuro merged 4 commits into
merge-train/fairies-v5from
nico/f-807-aztec-packages-offchain-inbox-eviction-bypass-unvalidated
Jul 13, 2026
Merged

fix: prevent reception of messages too far into the future#24645
nventuro merged 4 commits into
merge-train/fairies-v5from
nico/f-807-aztec-packages-offchain-inbox-eviction-bypass-unvalidated

Conversation

@nventuro

Copy link
Copy Markdown
Contributor

I added a sanity check to avoid having messages implausibly far into the future, which would lead to them not getting evicted etc., but more importantly which would signal some inconsistency somewhere.

@nventuro
nventuro requested a review from mverzilli July 10, 2026 21:30
Comment thread noir-projects/aztec-nr/CLAUDE.md Outdated
Comment thread noir-projects/aztec-nr/CLAUDE.md

@mverzilli mverzilli left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great!

Comment thread noir-projects/aztec-nr/CLAUDE.md Outdated
@nventuro
nventuro enabled auto-merge (squash) July 13, 2026 14:12
@nventuro
nventuro merged commit fdc2ac5 into merge-train/fairies-v5 Jul 13, 2026
12 checks passed
@nventuro
nventuro deleted the nico/f-807-aztec-packages-offchain-inbox-eviction-bypass-unvalidated branch July 13, 2026 14:32
PhilWindle pushed a commit that referenced this pull request Jul 21, 2026
I added a sanity check to avoid having messages implausibly far into the
future, which would lead to them not getting evicted etc., but more
importantly which would signal some inconsistency somewhere.

(cherry picked from commit fdc2ac5)
PhilWindle pushed a commit that referenced this pull request Jul 21, 2026
I added a sanity check to avoid having messages implausibly far into the
future, which would lead to them not getting evicted etc., but more
importantly which would signal some inconsistency somewhere.

(cherry picked from commit fdc2ac5)
rangozd pushed a commit to rangozd/aztec-packages that referenced this pull request Aug 5, 2026
…ocol#24645)

I added a sanity check to avoid having messages implausibly far into the
future, which would lead to them not getting evicted etc., but more
importantly which would signal some inconsistency somewhere.

(cherry picked from commit fdc2ac5)
rangozd pushed a commit to rangozd/aztec-packages that referenced this pull request Aug 5, 2026
…ztecProtocol#24931)

Forward-ports the **noir / aztec-nr / contracts** slice of the v5-next →
next backlog (work merged to `v5-next` after the ~2026-07-08 cut that
reshaped `next`).

## Applied (clean cherry-picks, chronological)
- fix: prevent reception of messages too far into the future (AztecProtocol#24645)
- fix(aztec-nr): reject infinity ephemeral key in message encryption
(AztecProtocol#24665)
- fix(aztec-nr): tolerate malformed partial-note completion logs
(AztecProtocol#24668)
- docs(aztec-nr): document partial note completion trust model (AztecProtocol#24816)
- refactor(aztec-nr): shared no-op sync handler for stateless contracts
(AztecProtocol#24844)
- fix: dont panic on note msgs on contracts with no notes (AztecProtocol#24852)
- docs(noir-contracts): document standard-contract re-pin consequences
(AztecProtocol#24890)

## ⚠️ Needs owner conflict-resolution (conflict against reshaped `next`;
not included here)
Cherry-pick onto this branch and resolve:
- [ ] `git cherry-pick -x 9f1167e` — feat!: make inbox secrets be
multiple fields (AztecProtocol#24599)
- [ ] `git cherry-pick -x 4490597` — fix(aztec-nr): prevent recipient
forging a colliding handshake (AztecProtocol#24403)
- [ ] `git cherry-pick -x 8b1903c` — feat!: forbid external note
validation checks (AztecProtocol#24644)
- [ ] `git cherry-pick -x 10e339a` — fix(aztec-nr)!: compute note
property selectors from the packed layout (AztecProtocol#24689)
- [ ] `git cherry-pick -x 15c7a1e` — chore: clarify scope of packable
impl detection (AztecProtocol#24820)
- [ ] `git cherry-pick -x f66808c` — fix: change init and single
claim nullif to incl owner address, add testing utilities (AztecProtocol#24892)

Part of the manual v5-next → next backlog sweep. Draft until conflicts
are resolved and CI is green.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants