Skip to content

Fix for checkpoint issue#14

Merged
andygolay merged 2 commits intomainfrom
security-fixes
Nov 29, 2025
Merged

Fix for checkpoint issue#14
andygolay merged 2 commits intomainfrom
security-fixes

Conversation

@andygolay
Copy link
Copy Markdown
Collaborator

@andygolay andygolay commented Nov 28, 2025

Security Fix: Add Checkpoint in release_rate_limit_capacity

  • Fix for issue 1 in https://www.notion.so/movementlabs/OFT-issues-2ae18675b2d780af9013ee9082afccdd
  • Add checkpoint before modifying in_flight_on_last_update in release_rate_limit_capacity to account for decay, preventing loss of decay information and potential rate limit bypass exploits
  • Fixes issue where multiple releases in quick succession could use outdated in_flight_on_last_update values, matching the pattern used in try_consume_rate_limit_capacity_at_time

@andygolay andygolay requested a review from rubujubi November 28, 2025 19:36
@andygolay andygolay changed the title implement fix for issue 1 Fix for checkpoint issue Nov 28, 2025
@andygolay andygolay requested a review from Primata November 28, 2025 20:08
@andygolay andygolay merged commit cc797e4 into main Nov 29, 2025
0 of 6 checks passed
@andygolay andygolay deleted the security-fixes branch December 1, 2025 04:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants