anastasis

commit d0e1d5cb7d0a176ba4b349615a0d363d133cc1c0
parent abcbf5ba681e5a65d8000bd7f8fe5c474bc01540
Author: Christian Grothoff <christian@grothoff.org>
Date:   Wed, 29 Jul 2026 17:01:04 +0200

do not keep the unverified amount from the IBAN event notification

Diffstat:
M
src/authorization/anastasis_authorization_plugin_iban.c
 | 
11
++++++-----

1 file changed, 6 insertions(+), 5 deletions(-)
diff --git a/src/authorization/anastasis_authorization_plugin_iban.c b/src/authorization/anastasis_authorization_plugin_iban.c
@@ -118,10 +118,6 @@ struct ANASTASIS_AUTHORIZATION_State
    */
   struct GNUNET_DB_EventHandler *eh;
 
-  /**
-   * Amount that was transferred.
-   */
-  struct TALER_Amount amount;
 };
 
 
@@ -295,11 +291,16 @@ bank_event_cb (void *cls,
 
   if (NULL != extra)
   {
+    struct TALER_Amount amount;
+
+    /* The amount is only carried for diagnostics: the authoritative value is
+       re-read from the database by #check_payment_ok(), so we must not keep
+       (or act on) whatever the notification claims. */
     amount_s = GNUNET_strndup (extra,
                                extra_size);
     if (GNUNET_OK !=
         TALER_string_to_amount (amount_s,
-                                &as->amount))
+                                &amount))
     {
       GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
                   "Expected amount in event notification, got `%s'\n",