Sponsored Content
Skip to content

fix: Disallow MPTClearRequireAuth if is set - #6712

Merged
ximinez merged 7 commits into
XRPLF:developfrom
yinyiqian1:fix-mutable
Apr 20, 2026
Merged

fix: Disallow MPTClearRequireAuth if is set#6712
ximinez merged 7 commits into
XRPLF:developfrom
yinyiqian1:fix-mutable

Conversation

@yinyiqian1

Copy link
Copy Markdown
Contributor
  • If domain exists, issuer MUST never clear the RequireAuth flag for MPT.
  • some XRPL_ASSERT should not replaced by returning tefINTERNAL to avoid node crash when new features added in the future.

High Level Overview of Change

Context of Change

API Impact

  • Public API: New feature (new methods and/or new fields)
  • Public API: Breaking change (in general, breaking changes should only impact the next api_version)
  • libxrpl change (any change that may affect libxrpl or dependents of libxrpl)
  • Peer protocol change (must be backward compatible or bump the peer protocol version)

@mvadari mvadari left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changing the asserts to returning tefINTERNAL requires an amendment.

@lmaisons

lmaisons commented Apr 2, 2026

Copy link
Copy Markdown
Contributor

For the sake of the less initiated: What happens now when the assert fires? How does the client percieve the current behaviour?

I guess I half-expected this to be so far into "undefined" that tefINTERNAL would be the first version the client was aware of.

@mvadari

mvadari commented Apr 2, 2026

Copy link
Copy Markdown
Contributor

For the sake of the less initiated: What happens now when the assert fires? How does the client percieve the current behaviour?

I guess I half-expected this to be so far into "undefined" that tefINTERNAL would be the first version the client was aware of.

Asserts only fire in debug builds. In release builds (which is what people run in production), it does nothing.

@mvadari mvadari added the AI Triage Bugs and fixes that have been triaged via AI initiatives label Apr 2, 2026
@yinyiqian1 yinyiqian1 changed the title fix: disallow MPTClearRequireAuth if domain exists fix: Disallow MPTClearRequireAuth if domain exists Apr 2, 2026
@codecov

codecov Bot commented Apr 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.8%. Comparing base (852fbe9) to head (d42dbb0).
⚠️ Report is 4 commits behind head on develop.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff            @@
##           develop   #6712     +/-   ##
=========================================
+ Coverage     81.6%   81.8%   +0.2%     
=========================================
  Files         1010    1010             
  Lines        75992   76089     +97     
  Branches      7605    7529     -76     
=========================================
+ Hits         62002   62230    +228     
+ Misses       13990   13859    -131     
Files with missing lines Coverage Δ
...ibxrpl/tx/transactors/token/MPTokenIssuanceSet.cpp 100.0% <100.0%> (ø)

... and 12 files with indirect coverage changes

Impacted file tree graph

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@yinyiqian1

Copy link
Copy Markdown
Contributor Author

Changing the asserts to returning tefINTERNAL requires an amendment.

@mvadari Just added

@yinyiqian1
yinyiqian1 requested review from lmaisons and mvadari April 2, 2026 21:22
@yinyiqian1

Copy link
Copy Markdown
Contributor Author

@mvadari @lmaisons Could you help review this PR when you are free? Thanks!

@mvadari

mvadari commented Apr 9, 2026

Copy link
Copy Markdown
Contributor

@yinyiqian1 if you're using fixSecurity3_1_3 then this has to be merged into the 3.1.3 staging branch first in a separate PR.

cc @bthomee on whether this is/should be slated for 3.1.3

@bthomee

bthomee commented Apr 9, 2026

Copy link
Copy Markdown
Collaborator

@yinyiqian1 if you're using fixSecurity3_1_3 then this has to be merged into the 3.1.3 staging branch first in a separate PR.

cc @bthomee on whether this is/should be slated for 3.1.3

I think we can squeeze this one in, since it benefits from leveraging the new fix amendment. I don't think it will be too much effort to cherry-pick it into the staging branch after merging into develop.

@yinyiqian1

Copy link
Copy Markdown
Contributor Author

@yinyiqian1 if you're using fixSecurity3_1_3 then this has to be merged into the 3.1.3 staging branch first in a separate PR.

cc @bthomee on whether this is/should be slated for 3.1.3

@mvadari I just created a separate PR to merge into staging 3.1.3: #6940. It cherry-picks the commits from current 6712 and resolves conflicts.

@ximinez ximinez added this to the 3.1.3 (develop) milestone Apr 16, 2026
@vlntb
vlntb self-requested a review April 17, 2026 13:20

@vlntb vlntb left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mathbunnyru mathbunnyru added the Ready to merge *PR author* thinks it's ready to merge. Has passed code review. Perf sign-off may still be required. label Apr 20, 2026

@ximinez ximinez left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This review can be dismissed and the PR merged after the questions below are answered. (To be fair, the first question is more of an opinion with a question tacked on to the end.)

Comment thread src/libxrpl/ledger/helpers/MPTokenHelpers.cpp Outdated
Comment thread src/libxrpl/tx/transactors/token/MPTokenIssuanceSet.cpp
@mathbunnyru mathbunnyru removed the Ready to merge *PR author* thinks it's ready to merge. Has passed code review. Perf sign-off may still be required. label Apr 20, 2026
@mathbunnyru

mathbunnyru commented Apr 20, 2026

Copy link
Copy Markdown
Contributor

Removing the "Ready to merge label" until Ed's questions are answered

@yinyiqian1
yinyiqian1 requested a review from ximinez April 20, 2026 18:36
@ximinez
ximinez dismissed their stale review April 20, 2026 21:22

As promised, my questions have been answered, so I'm dismissing this review.

@ximinez ximinez changed the title fix: Disallow MPTClearRequireAuth if domain exists fix: Disallow MPTClearRequireAuth if is set Apr 20, 2026
@ximinez ximinez added the Ready to merge *PR author* thinks it's ready to merge. Has passed code review. Perf sign-off may still be required. label Apr 20, 2026
@ximinez
ximinez added this pull request to the merge queue Apr 20, 2026
Merged via the queue into XRPLF:develop with commit 4b198cd Apr 20, 2026
3 checks passed
marek-foss-neti pushed a commit to marek-foss-neti/rippled that referenced this pull request May 5, 2026
Co-authored-by: Ayaz Salikhov <mathbunnyru@users.noreply.github.com>
@yinyiqian1
yinyiqian1 deleted the fix-mutable branch May 7, 2026 18:42
@yinyiqian1
yinyiqian1 restored the fix-mutable branch May 7, 2026 18:43
beartec-jpg pushed a commit to beartec-jpg/FalconLedger that referenced this pull request Jun 1, 2026
Co-authored-by: Ayaz Salikhov <mathbunnyru@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AI Triage Bugs and fixes that have been triaged via AI initiatives Ready to merge *PR author* thinks it's ready to merge. Has passed code review. Perf sign-off may still be required.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants