0.26.0-alpha
Please report bugs using the issue tracker at GitHub:
https://github.com/flokiorg/go-flokicoin/issues
This release ports a batch of security hardening, protocol correctness, and RPC client improvements from upstream btcd.
Highlights
Security & Robustness
- BIP30 Enforcement Hardening: Ported upstream's stricter BIP30 (duplicate coinbase) enforcement logic.
- Panic Recovery: Peer message-handling goroutines now recover from panics instead of taking down the process.
- Wire Protocol Hardening:
ReadMessagenow enforces full payload consumption; witness item reads are bounded to the remaining decode slab, closing a class of malformed-message issues. - Address Validation:
addrv2now rejects/reclassifies IPv4-mapped IPv6 addresses; RFC7343 ORCHIDv2 and zero-prefix IPv6 addresses are rejected as unroutable.
RPC Client
- Fixed a shutdown double-resolve race and added
httpURLcaching. - In-flight HTTP requests can now be canceled; several batch-request bugs fixed.
- Added
GetTxOutProof, a dial-timeout fix, and faster JSON string parsing.
Networking & Sync
netsyncnow allows syncing with non-localhost peers on regtest/simnet.- Fixed a peer add/done race between
peerHandlerandsyncManager.
Dependency Security
- Bumped
golang.org/x/cryptotov0.52.0, closing 7 upstream advisories in the SSH subpackage (not reachable from go-flokicoin, but patched as a precaution).
Assets
Additional builds (ppc64, mips, *BSD, illumos/solaris) are available on the GitHub release page.