mirror/firmware
1
0 Fork 0
mirror of https://github.com/meshtastic/firmware.git synced 2026-09-29 17:55:25 -04:00
Code Issues Packages Projects Releases Wiki Activity

Gate identity learning on signature in NodeDB::updateUser (#11084)

Browse Source
This commit is contained in:
Thomas Göttgens authored and GitHub committed 2026-07-20 11:56:42 +02:00
1 parent 405a6bfd8a
commit 5ded0ec8c5
5 files changed
+96 -7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/modules/NodeInfoModule.cpp
+3 -1
View File
@@ -61,7 +61,9 @@ bool NodeInfoModule::handleReceivedProtobuf(const meshtastic_MeshPacket &mp, mes
// Coerce user.id to be derived from the node number
snprintf(p.id, sizeof(p.id), "!%08x", getFrom(&mp));
bool hasChanged = nodeDB->updateUser(getFrom(&mp), p, mp.channel);
// updateUser() refuses the identity write for a known signer sending unsigned (all unicast
// NodeInfo), so the exchange above still proceeds but cannot spoof the stored name.
bool hasChanged = nodeDB->updateUser(getFrom(&mp), p, mp.channel, mp.xeddsa_signed);
bool wasBroadcast = isBroadcast(mp.to);