Warning: Permanently added '3.83.137.45' (ED25519) to the list of known hosts. You can reproduce this build on your computer by running: sudo dnf install copr-rpmbuild /usr/bin/copr-rpmbuild --verbose --drop-resultdir --srpm --task-url https://copr.fedorainfracloud.org/backend/get-srpm-build-task/10870953 Version: 1.9 PID: 10494 Logging PID: 10496 Task: {'appstream': False, 'background': False, 'build_id': 10870953, 'chroot': None, 'distributions_in_build': [], 'distributions_in_project': ['alma-kitten+epel-10', 'epel-10', 'epel-9', 'fedora-43', 'fedora-44'], 'package_name': None, 'project_dirname': 'daily', 'project_name': 'daily', 'project_owner': '@meshtastic', 'repos': [], 'sandbox': '@meshtastic/daily--vidplace7', 'source_json': {'clone_url': 'https://github.com/meshtastic/firmware.git', 'committish': '3a7c49972209c7b9adbda245b0d3c1d8337fd8b1', 'spec': '', 'srpm_build_method': 'rpkg', 'subdirectory': '', 'type': 'git'}, 'source_type': 8, 'submitter': 'vidplace7', 'task_id': '10870953'} Running: git clone https://github.com/meshtastic/firmware.git /var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware --depth 500 --no-single-branch --recursive cmd: ['git', 'clone', 'https://github.com/meshtastic/firmware.git', '/var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware', '--depth', '500', '--no-single-branch', '--recursive'] cwd: . rc: 0 stdout: Submodule path 'meshtestic': checked out 'dcac7e5673005f4d8a2b1f0f6e06877b689d7519' Submodule path 'protobufs': checked out '84bfb0fdb3b853ea18abc4535497fa41a1b09546' stderr: Cloning into '/var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware'... Submodule 'meshtestic' (https://github.com/meshtastic/meshTestic) registered for path 'meshtestic' Submodule 'protobufs' (https://github.com/meshtastic/protobufs.git) registered for path 'protobufs' Cloning into '/var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware/meshtestic'... Cloning into '/var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware/protobufs'... Running: git checkout 3a7c49972209c7b9adbda245b0d3c1d8337fd8b1 -- cmd: ['git', 'checkout', '3a7c49972209c7b9adbda245b0d3c1d8337fd8b1', '--'] cwd: /var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware rc: 0 stdout: stderr: Note: switching to '3a7c49972209c7b9adbda245b0d3c1d8337fd8b1'. You are in 'detached HEAD' state. You can look around, make experimental changes and commit them, and you can discard any commits you make in this state without impacting any branches by switching back to a branch. If you want to create a new branch to retain commits you create, you may do so (now or later) by using -c with the switch command. Example: git switch -c Or undo this operation with: git switch - Turn off this advice by setting config variable advice.detachedHead to false HEAD is now at 3a7c49972 fix(mesh): dedup opaque relays to prevent an undecryptable-frame broadcast storm (#11522) Generated rpkg config: [rpkg] preprocess_spec = True [git] anon_clone_url = https://github.com/%(repo_path)s [lookaside] download_url = https://${git_props:remote_netloc}/repo/pkgs/%(repo_path)s/%(filename)s/%(hashtype)s/%(hash)s/%(filename)s Writing config into /var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/.config/rpkg.conf Running: rpkg srpm --outdir /var/lib/copr-rpmbuild/results --spec /var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware cmd: ['rpkg', 'srpm', '--outdir', '/var/lib/copr-rpmbuild/results', '--spec', '/var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware'] cwd: /var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware rc: 0 stdout: Wrote: /var/lib/copr-rpmbuild/results/meshtasticd.spec setting SOURCE_DATE_EPOCH=1786924800 Wrote: /var/lib/copr-rpmbuild/results/meshtasticd-2.8.0-14278.daily.git3a7c49972.src.rpm RPM build warnings: stderr: git_dir_pack: archiving /var/lib/copr-rpmbuild/workspace/workdir-z0esz2ul/firmware: commit 3a7c49972209c7b9adbda245b0d3c1d8337fd8b1 (HEAD, origin/develop, origin/HEAD, develop) Author: Jonathan Bennett Date: Sun Aug 16 20:33:21 2026 -0500 fix(mesh): dedup opaque relays to prevent an undecryptable-frame broadcast storm (#11522) * NextHopRouter: dedup opaque relays to prevent a broadcast storm Undecryptable ("opaque") frames are relayed by relayOpaquePacket(), which by design never enters PacketHistory - so unauthenticated frames can't poison next-hop learning or ACK matching (packet-authenticity policy, d6b12ea3f). But PacketHistory admission was also the *only* deduplication on that path. With none, a dense mesh re-relays every copy of every opaque frame and the copy count multiplies at each hop into an unbounded broadcast storm; "let hop exhaustion bound it" caps depth, not count. Add a small, isolated (from,id) seen-set checked in relayOpaquePacket() before rebroadcast: a second PacketHistory-style table (fixed 32-slot ring, round-robin eviction) that only suppresses duplicate opaque rebroadcasts and never feeds routing/ACK/next-hop, preserving the security property. Genuine originator (re)transmissions (hop_start == hop_limit) are still relayed so reliable opaque unicast propagates (mirrors FloodingRouter's isRepeated). Observed on a mixed-channel mesh: one node relayed a single undecryptable broadcast 23x (every overheard copy) with TX queues saturated, while decodable traffic on the same node deduped normally. Co-Authored-By: Claude Opus 4.8 * Apply suggestions from code review Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Change log level from WARN to TRACE for duplicates --------- Co-authored-by: Claude Opus 4.8 Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> git_dir_pack: Wrote: /var/lib/copr-rpmbuild/results/firmware-3a7c4997.tar.gz warning: Downloading https://github.com/meshtastic/web/releases/download/v2.6.7/build.tar to /var/lib/copr-rpmbuild/results/build.tar Downloading https://github.com/meshtastic/web/releases/download/v2.6.7/build.tar to /var/lib/copr-rpmbuild/results/build.tar Output: ['meshtasticd-2.8.0-14278.daily.git3a7c49972.src.rpm', 'firmware-3a7c4997.tar.gz', 'meshtasticd.spec', 'build.tar'] Running SRPMResults tool Using distributions_in_project for this build. Extracting arch-specific tags for alma-kitten+epel-10 Extracting arch-specific tags for epel-10 Extracting arch-specific tags for epel-9 Extracting arch-specific tags for fedora-43 Extracting arch-specific tags for fedora-44 Package info: { "architecture_specific_tags": { "alma-kitten+epel-10": {}, "epel-10": {}, "epel-9": {}, "fedora-43": {}, "fedora-44": {} }, "name": "meshtasticd", "epoch": null, "version": "2.8.0", "release": "14278.daily.git3a7c49972" } SRPMResults finished