04:15:12 -xmr-pr- da-kami opened issue #7624: monero-wallet-rpc `--password-file` should be disallowed with `--walle...
04:15:12 -xmr-pr- > https://github.com/monero-project/monero/issues/7624
05:10:29 <mj-xmr> I will be either unavailable until Monday, or will write from a secondary nickname.
05:47:06 <Space[m]1> How to delete subaddress in monero gui?
09:36:27 <moneromooo> You'd clear its label I think.
13:45:12 -xmr-pr- mahnunchik opened issue #7627: wallet2::balance -> m_light_wallet_unlocked_balance, wallet2::unlocked...
13:45:12 -xmr-pr- > https://github.com/monero-project/monero/issues/7627
19:07:15 <mhoqbpvzh> If only one of you gave Papa ChooChoo some TLC when I wrote a faster miner, instead of ignoring him, things could have happened differently https://np.reddit.com/r/Monero/comments/5lsfgt/_/dbz0jnp/
19:30:12 -xmr-pr- frankwalter1301 opened issue #7630: Exception in main! boost::filesystem::unique_path: Function not implem...
19:30:12 -xmr-pr- > https://github.com/monero-project/monero/issues/7630
20:44:59 <moneroismycoin> Why is the monero repository locked to contributors only?
20:45:23 <moneroismycoin> I cannot comment on an issue
20:45:45 <moneromooo> Because some asshole is spamming issues/PRs/comments every few hours.
20:45:50 <moneromooo> fluffypony: ^
20:46:28 <moneromooo> People just trying to shit up the world... What a life it must be...
20:46:54 <moneroismycoin> ah I suspected it
20:48:49 <moneroismycoin> moneromooo this the log you asked me btw https://pastebin.com/raw/JDLWjKnC
20:49:20 <moneromooo> Thanks
20:51:16 <moneromooo> I think the best we can do here, since this is the mmap support test, is to proceed. I'll have patch for you in a few minutes, just checking it builds.
20:51:33 <moneromooo> Hopefully all the other filesystem things are implemented...
20:52:05 <moneromooo> https://paste.debian.net/hidden/76657ea1/
21:09:50 <NeighbourlyGuy> https://github.com/monero-project/monero/blob/master/src/blockchain_db/blockchain_db.cpp#L206-L229
21:10:32 <NeighbourlyGuy> That for loop at the end, shouldn't it only remove unspent keyimages until the transaction input that caused the stop?
21:10:40 <NeighbourlyGuy> spent*
21:14:22 <moneromooo> Yes, but the txn will be aborted anyway, so what it does doesn't actually matter AFAICT.
21:14:46 <moneromooo> So it removes all it's done so far, plus stuff it hasn't yet done.
21:15:05 <NeighbourlyGuy> But what if that stuff it hasn't yet done is actually a double spend?
21:15:57 <NeighbourlyGuy> The validation that goes before calling any of these functions is quite stringent, so an unknown input type should never even reach this code but that might not be  the case in the future.
21:16:58 <moneromooo> Your question ("what it...") is way too open ended. Ask a more precise question.
21:19:52 <NeighbourlyGuy> Assume a transaction with the following transaction input types: [ unknown type, double spend txin_to_key ], the reverting logic in the for loop would cause the second element which was an attempted double spend to have its keyimage removed from the database.
21:21:19 <NeighbourlyGuy> AFAICT this code is the code responsible for double spend prevention. The add_spent_key would fail on a double spend and throw an error.
21:21:32 <moneromooo> Ah. And the function returns void rather than an error or an exception. Good point.
21:22:14 <moneromooo> Adding a throw there (and getting rid of the removals) probably hardens this.
21:22:28 <NeighbourlyGuy> https://github.com/monero-project/monero/blob/master/src/cryptonote_core/blockchain.cpp#L4194-L4205
21:24:02 <NeighbourlyGuy> That add_transaction() is called by add_block(), which means this function is the only double spend prevention code at the moment.
21:26:25 <moneromooo> Hrm. Plausible enough so far.
21:26:54 <NeighbourlyGuy> It will never pass transaction validation though, but it's worth hardening it since it seems pretty critical.
21:27:32 <moneromooo> Do you agree that throwing in that function (instead of just return;) would fix it ?
21:27:40 <moneromooo> (and not bothering with removing)
21:28:29 <NeighbourlyGuy> I don't know enough about the monero codebase to make such assesment, I'm just a security researcher. You don't ask a bulldozer to build your house hehe.
21:29:34 <moneromooo> OK, I'm pretty sure it's enough :)
21:30:02 <moneromooo> Always good to make sure though. Is "NeighbourlyGuy" OK for credit for the report in the commit message ?
21:35:26 <NeighbourlyGuy> Ahh, I just typed in a random name, I'm from https://keyboardwarrior.be, but putting in KeyboardWarrior is good enough.
21:35:40 <moneromooo> Got it, thanks.
21:43:14 <NeighbourlyGuy> No problem, thank you as well.
21:44:41 <moneromooo> Patched, I'll PR after tests pass, just in case. Thanks.
22:45:12 -xmr-pr- ndorf opened pull request #7631: cmake: Don't default to -march=native on OpenBSD
22:45:12 -xmr-pr- > https://github.com/monero-project/monero/pull/7631
23:15:12 -xmr-pr- ndorf opened pull request #7632: cmake: Don't default to -march=native on OpenBSD
23:15:12 -xmr-pr- > https://github.com/monero-project/monero/pull/7632