Bug report from someone trying to formally specify our security properties showed that one of our comments is misleading in a specific corner case (and a PoC demonstrating that corner case!). I absolutely love getting this kind of thing, it shows someone has read the code and comments carefully to understand exactly what can happen in all cases.
The code wasn't wrong (if you attack it in a specific way, it triggers the defence I expect it to trigger), but the explanation was and the defence is triggered three instructions later than the comment says (but still in the code that is untrusted).
David Chisnall (*Now with 50% more sarcasm!*)
npub1ak…wtk0r
2026-10-21 09:36:22 UTC
Author Public Key
npub1akvd69ev3lkgrej6cnftq6rluwkg2ksjayuuq2yzphejqqkgjmnsxwtk0rSeen on
wss://relay.ditto.pubPublished at
2026-10-21 09:36:22 UTCEvent JSON
{
"id": "4b1493ae103eea788e5773cd4b9d17a2197edc64f3d6e211ec5940fb93b1d6b0",
"pubkey": "ed98dd172c8fec81e65ac4d2b0687fe3ac855a12e939c028820df32002c896e7",
"created_at": 1792575382,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/david_chisnall/statuses/117478220261720453",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Bug report from someone trying to formally specify our security properties showed that one of our comments is misleading in a specific corner case (and a PoC demonstrating that corner case!). I absolutely love getting this kind of thing, it shows someone has read the code and comments carefully to understand exactly what can happen in all cases.\n\nThe code wasn't wrong (if you attack it in a specific way, it triggers the defence I expect it to trigger), but the explanation was and the defence is triggered three instructions later than the comment says (but still in the code that is untrusted).",
"sig": "bb9cf68288c1df9b0626db48f83dc67add11a2bb6ce85c17dc3acedf8d29404d8f786cc422be799c63243f6558c367156cde10742bfcd7bc6cf534d6a6f1fa22"
}