Skip to content

auth: fix serial number arithmetic for replay detection - #755

Merged
rsmarples merged 1 commit into
masterfrom
replay
Nov 3, 2026
Merged

rsmarples merged 1 commit into
masterfrom
replay

Conversation

@rsmarples

Copy link
Copy Markdown
Member

No description provided.

@coderabbitai

coderabbitai Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review.

Walkthrough

Replay validation now interprets the replay-counter difference as signed and rejects values less than or equal to zero.

Changes

Replay Counter Validation

Layer / File(s) Summary
Replay-counter ordering check
src/auth.c
dhcp_auth_validate now treats the replay-counter difference as signed before rejecting values less than or equal to zero.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Bug fix

Merge Risk: Minimal · up to 96af5

No actionable merge-blocking risk remains in the reviewed change.

Pre-merge checks: Passed 4 · Inconclusive 1

Failed Failed checks: 1 inconclusive

Check name Status Explanation Resolution
Description check Inconclusive No pull request description was provided, so the changeset has no supporting description. Add a brief description that explains the signed replay-counter arithmetic change and its effect on replay detection.
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title clearly identifies the change to serial number arithmetic used for replay detection.
Docstring Coverage Passed Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 1 functions across 1 files.

Finishing Touches
Generate docstrings
  • Commit to this branch
  • Create a new PR
Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

CodeRabbit Verify

  • Run CodeRabbit Verify to test the changes in this pull request.
Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 184b8096-f341-4a1b-a1ff-57ac91c2b596
Commits

Reviewing files that changed from the base of the PR and between ebe7513 and 96af5ff.

Files selected for processing: 1
  • src/auth.c

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.

@rsmarples
rsmarples merged commit f21332c into master Nov 3, 2026
21 of 22 checks passed
@rsmarples
rsmarples deleted the replay branch November 4, 2026 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant