Skip to content

fix(stdlib): correct NoteDao size#22068

Merged
benesjan merged 1 commit into
merge-train/spartanfrom
spyros/a-838-audit-190-notedao-getsize-calculation-incorrect
Mar 27, 2026
Merged

fix(stdlib): correct NoteDao size#22068
benesjan merged 1 commit into
merge-train/spartanfrom
spyros/a-838-audit-190-notedao-getsize-calculation-incorrect

Conversation

@spypsy

@spypsy spypsy commented Mar 26, 2026

Copy link
Copy Markdown
Member

Summary

  • make NoteDao.getSize() return the actual serialized buffer length
  • add a regression test that checks getSize() matches toBuffer().length

Fixes A-838

@PhilWindle PhilWindle requested a review from benesjan March 27, 2026 10:01
@PhilWindle

Copy link
Copy Markdown
Collaborator

@benesjan This was picked up by Claude. Is this an actual fix or just nonsense?

@benesjan benesjan enabled auto-merge (squash) March 27, 2026 11:01
@benesjan benesjan merged commit 2bc24a7 into merge-train/spartan Mar 27, 2026
26 checks passed
@benesjan benesjan deleted the spyros/a-838-audit-190-notedao-getsize-calculation-incorrect branch March 27, 2026 11:01
@benesjan

Copy link
Copy Markdown
Contributor

@PhilWindle looks legit but note that all the getSizes functions are generally very neglected and I'm not sure if they even have future.

AztecBot pushed a commit that referenced this pull request Mar 27, 2026
@AztecBot

Copy link
Copy Markdown
Collaborator

✅ Successfully backported to backport-to-v4-next-staging #22091.

github-merge-queue Bot pushed a commit that referenced this pull request Mar 27, 2026
BEGIN_COMMIT_OVERRIDE
fix: only clear provenBlockNumber when it exceeds prune point (#21946)
chore: (A-779) load all accounts before calling
LogService.#getSecretsForSenders (#21923)
fix: align staging-public mana target with testnet/mainnet (#21983)
chore: (A-777) add warn logs for regressive path in block synchronizer
(#21925)
fix: fully validate txs retrieved from tx file store (#21988)
refactor: extract checkpoint proposal handling to ProposalHandler
(#21999)
fix: unbounded memory in calldataRetriever (#22004)
fix(p2p): check peer rate limit before global to prevent quota
starvation (#21997)
fix(p2p): evict expired failed-auth-handshake entries on heartbeat
(#21992)
chore: defensively handle skipPushProposedBlocksToArchiver (#22017)
chore: bump testnet prover resource profile to prod-hi-tps (#22019)
chore: (A-835) remove unused serializer (#22037)
fix(p2p): remove disconnected peers from scoring maps (#22009)
fix(e2e): set anvilSlotsInAnEpoch in slashing tests (#21869)
fix(ethereum): Audit fixes A-810, A-812 (nonce race, isEscapeHatchOpen
logging) (#21948)
chore: remove old TxPool implementation (#22028)
fix: Fix blob encoding when uploaded from proposals (#22045)
chore: Adds /cycle and /fix skills. Also configures linear mcp server
(#22043)
chore: remove validatorReexecute config option (#22024)
fix(sequencer): use last L1 slot of L2 slot as eth_simulateV1 timestamp
(#22023)
docs(simulator): clarify teardown gas billing is intentional (#22057)
chore: revert account loading optimization in log service (#22062)
fix: use DateProvider in PeerScoring (#22070)
fix(aztec.js): preserve extraHashedArgs in DeployMethod.with() (#22053)
fix(p2p): replace process.exit() with graceful shutdown in worker
cleanup (#22046)
chore: merge next (#22089)
fix(stdlib): correct NoteDao size (#22068)
feat: improve blob download from filestores (#22096)
fix: remove stale tx_pool v1 benchmark reference (#22104)
END_COMMIT_OVERRIDE
AztecBot added a commit that referenced this pull request Mar 28, 2026
BEGIN_COMMIT_OVERRIDE
fix(stdlib): correct NoteDao size (#22068)
fix: reject log retrieval requests for not-in-context contracts (#22047)
refactor: remove aztec dependency from aztec_sublib (#22033)
END_COMMIT_OVERRIDE
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants